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[57] ABSTRACT 

The present invention provides the capability to easily 
access many different application programs over the WWW 
via a common user interface. By providing standard 
procedures, routines, tools, and software "hooks" for access- 
ing software applications over the WWW, software devel- 
opers can concentrate on the functionality of the application 
program and easily use HTML to provide a GUI interface for 
the application program. HTML is a well-known language 
which can be used by almost any computer system on the 
market today. In addition, since HTML is a fairly well 
controlled and standardized language, new software appli- 
cation features can be added as they are developed and 
supported by HTML. In addition, since HTML is a widely 
adopted, non-proprietary technology, the present invention 
can provide open access to a large market for even very 
small software developers. Further, the present invention 
also allows software developers to adopt a standard access 
protocol, which allows them to provide support for any 
computer system which is capable of utilizing a HTML 
cognizant browser. Finally, by providing easy-to-implement, 
standardized solutions to the issues of user interface, 
authentication/security, and web transaction support, the 
common user interface of the present invention overcomes 
the limitations existing in previous solutions. 
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<html> 

<title>Cars Around the World<title/> 

<FORM ACTION=7cgi-prot/exrnp5cgi.exe M METHOD= M POST"> 

<H3>Rental Reservation</H3> 

<HR> 

Enter the following information and then press submit: 
<HR> 

<p>Member number: <INPUT TYPE="texT NAME="membno" SI2E=4> 

<p>Name: Last: <INPUT TYPE="text" NAME="lname M SIZE=1 5> 

First: <INPUT TYPE="text" NAME-'fname" SIZE=1 5> 
Ml: <INPUT TYPE= ,l text" NAME="mr SIZE=1 > 

<HR> 

<P>Origin City: <INPUT TYPE="texT NAME- 'orig city" SI2E=1 5> 

State: <INPUT TYPE="texT NAME="origstate" SIZE=2> 
<P>Start Date (MM/DD.YY): <INPUT TYPE="text" NAME="startdate" SI2E=8> 

Number of days <1NPUT TYPE="text" NAME-'days" SIZE=3> 
<P>Select Car Preference: 

<INPUT TYPE="radio M NAME^'cartype" VALUE=1> Compact 

<INPUT TYPE="radio" NAME^cartype" CHECKED VALUE=2> Mid Size 

<INPUTTYPE-"radio" NAME="cartype" VALUE=3> Full Size 

<lNPUTTYPE="radio" NAME^'cartype" VALUE=4> Luxury 

<HR> 

<P><lNPUT TYPE="submr VALUE="Submit"> 

<P><INPUT TYPE="hidden" NAME="wf-cghSubmit B VALUE="2"> 

<P><INPUT TYPE^'hidden" NAME="wf-api-proc-template" VALUE="www Reservation Requests 

<INPUT TYPE="hidden" NAME='*wf-fmig~key" VALUE= ,l webfmcust"> 

<INPUT TYPE="hidden" NAME="wf-cgi-htmr VALUE=7exm/smp/exmp5srk.htm"> 

</form> 

</html> 



FIG. 11 



membno=1234&lname=Doe&fname=John&mFE&origcit^ 

2F96&days=4&cartype=2&vtf-(£i-submit=^^ 

key=webfmcust&wf-cgi-html=%2Fexm°/o2Fsmp%2Fexmp5srk.htm 



FIG. 12 
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<html> 

<tit!e>Cars Around the World<title/> 

<FORM ACTION=7cghprot/exrnp5cgi.exe" METHOD= ,, POST"> 
<H3><CENTER>Customer's Reservation Number</CENTERx/H3> 
<HR> 

<p> <! - - "wf-act-outmsg" - -> 
<HR> 

<p><INPUT TYPE= M submft" VALUE="OK"> 

<p><INPUT TYPE="hidden ,, NAME="wf-cghsubmrT VALUE="13"> 

</form> 

</html> 



<html> 

<title>Cars Around the World<trtle/> 
<body> 

<FORM ACTIO^cgr-proVexmpScgLexe" METHOD="POST M > 
<H3><CENTER>Customer , s Reservation Number</CENTERx/H3> 
<HR> 

<p> Your reservation number is 441 1 . </p> 
<HR> 

<pxlNPUT TYPE="submr VALUE^'OK^ 

<p><INPUT TYPE="hkJden" NAME="wf-cgi-submit" VALUE="13"> 

<INPUT TYPE="hidden" NAME="wf-fmig-handle n VALUE="007777775F5265736572766174696F"> 

<INPUT TYPE="hidden" NAME= ,, wf-fmig-key ,, VALUE="webfmcusr> 

</form> 

</html> 



wf-cgi-submlt=13&vtf-fmig-handte^ 
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<html> 

<FORM ACTION=7cgi-prot/exmp5cgi.exe" METHOD= H POS"r> 
<HEAD> 

<title>IBM Internet Connection for FlowMark home page</title> 

</HEAD> 

<BODY> 

<h3> 

IBM Internet Connection for FlowMark home page 

</h3> 

<hr> 

<h4> 

Enter key, select next screen, then press the submit button. 

</h4> 

<strong> 

Key: 

</strong> 

<INPUT TYPE='W NAME="wf-fmig-key" SIZE=64> 



<INPUT TYPE="radio" NAME= M wf-cgi-htmr VALUE=7exm/html/exmp5ewLhtm H CHECKED> 
<IMG SRC=7exm/icons/exmp5ewi.giT ALIGN=MIDDLE HSPACE=5>Work with Work Items 
<br> 

<INPUT TYPE="radio" NAM E=*W-cgi- html" VALUE=7exm/html/exmp5epi.htm"> 

<!MG SRC=7exm/icons/exmp5epi.gif ALIGN=MIDDLE HSPACE=5>Work with Process Instances 

<br> 

<INPUT TYPE="radio" NAM E=" wf-cg i- htm I" VALUE=7exm/html/exmp5ept.htm M > 

<IMG SRC=7exm/icons/exmp5ept.gif 1 ALIGN=MIDDLE HSPACE=5>Work with Process Templates 

<! - - Start Submit Button & hidden variables > 

<hr> 

<INPUT TYPE="submit" VALUE="Submit B > 
<INPUTTYPE="hidden" NAME^wf-cgj-subrnft" VALUE="0"> 

<! - - End Submit Button & hidden variables > 

<br> 
<b> 
[ 

<a href=7exm/docs/exmp5d20.htm">Help | 

<a href=http7/www.ibm.com/">IBM home page</a» | 

<a href=http^/www.software.ibm.com/ad/flowmark/exmnOmst.htm">FiowMark home page</a> 
] 



wf-fmig-key^ebfmagent&wf-cgi-h^ 



<br> 



</FORM> 
</BODY> 
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<html> 

<FORM ACTION=7cgi-prot/exmp5cgi.exe M METHOD-POST^ 
<HEAD> 

<title>FlowMark - Work ltems,/titile> 

</HEAD> 

<BODY> 

<img src='7exm/icons/exmp5eww.gif ' alt^Work with Work ltems> 
<h4>Select a work item:</h4> 
<TABLE BORDER=1> 
<tr> 

<th COLSPAN=2>Description 

<th>Status 

<th>Activity name 

<th>Process 

<th>Program 

<th>Received<br>date & time 

<th>Priority 

<th>Category 
<! - - "wf-cgi-rbegin" - - > 
<tr> 

<td ALIGN=CENTER VALIGN^MIDDLE><INPUT TYPE="radio" 

NAME="wf-api-item" VALUE=^-api-item-id"> 
<td> NOWRAP><! - - "wf-api-item-descrip" - - > 
<td><! - - "wf-api-item-state 11 - - > 
<td><! - - "wf-api-item-name" - - > 
<td><! - - "wf-api-item-procinst" - - > 
<td><! - - "wf-api-item-impl" - - > 
<td ALIGN=CENTER><! - - "wf-apHtem-starttime" - - > 
<td ALIGN-CENTER><! - - "wf-api-item-priority" - - > 
<td><! - - M wf-api-item-category M - - > 
<! - - "wf-cgi-rend" - - > 

<rrABLE> 

<hr> 

<h4>Next, select which action you want to perform and 
<br> 

press the button below. 
</h4> 

<TABLE BORDER=0> 



<INPUT TYPE="radio" NAME="wf-cgi-submit' VALUE="3 M CHECKED> 
Start work item 



<tr> 
<td> 



<tr> 
<td> 
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<INPUT TYPE="radio" NAME= M wf-cgi-submit" VALUE= M 0"> 

Refresh list 

</TABLE> 



<hr> 

<INPUT TYPE= ,, submit M VALUE="Perform Action"> 

<INPUT TYPE= ,, hidden M NAME="wf-cgi-htmr VALUE=7exm/html/exmp5ewi.htm"> 



<hr> 

<aref="/exn/html/exmp5ehp.htm"> 

<img src=7exm/icons/exmp5efm.gif ALIGN=MIDDLE HSPACE=5> 

Return to home page 

<Ja> 

<aref="/exn/html/exmp5d20.htm"> 

<img src=7exm/icons/exmp5eoh.gif ALIGN=MIDDLE HSPACE=5> 

Help 

</a> 

<hr> 

<TABLE BORDER=1> 
<tr> 

<td>FiowMark User 
<td>FlowMark Database 
<td>FlowMark Server 
<td>Date & Time 
<tr> 

<td><! - - "wf-api-fmuser" - - > 

<td><! - - "wf-api-fmdb M - - > 

<td><! - - "wf-api-fmserver" - - > 

<td><! - - "wf-api-datetime" - - > 

</table> 

</FORM> 

</BODY> 

</HTML> 



<! - - Start Submit Button & hidden variables 



> 



<! - - End Submit Button & hidden variables 



> 
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<html> 

<FOMT SI2E=3> 

<FORM ACTION=7cgi-prot/exmp5cgi.exe" METHOD='*POSr> 
<HEAD> 

<titie>FlowMark - Work ltems</title> 

</HEAD> 

<BODY> 

<img src- Vexm/icons/exmp5eww.gif ' alt=Work with Work ltems> 
<h4>Select a work item:</h4> 
<TABLE BORDERS > 
<tr> 

<th COLSPAN=2>Description 

<th>Status 

<th>Activrty name 

<th>Process 

<th>Program 

<th>Received<br>date & time 
<th>Priority 
<th>Category 
<! - - "wf-cgi-rbegin" - - > 



<td ALIGN=CENTER VALIGN=MIDDLE><INPUT TYPE="radio" 
NAME="wf-api-item" 

VALUE="7777775F5363686564756C655F5265736572766174696F6E007777775F52657365727661 
74696F6E5F526571756573745F383500454D4147454E54007765626167656E7400776562666D616 
7656E74"> 

<td> NOWRAP>Schedule car 

<td>Ready 

<td>www_Schedule_Reservation 

<td>www_Reservation Request_85 

<td>Schedule__Reservation 

<td ALIGN=CENTER>09-03-1996 02:55:11PM 

<td ALIGN=CENTER>4004128 



<td>ALlGN=C ENTER VALIGN=MIDDLE><INPUT TYPE="radio H 
NAME="wf-api-item M 

VALUE= ,, 7777775F5363686564756C655F5265736572766174696F6E007777775F52657365727661 
74696F6E5F526571756573745F383500454D4147454E54007765626167656E7400776562666D616 
7656E74"> 

<td> NOWRAP>Schedule car 

<td>Ready 

<td>www_Schedule_Reservation 

<td>www_Reservation Request_84 

<td>Schedule_Reservation 

<td ALIGN=CENTER>09-03-1996 01:48:48PM 

<td ALIGN=CENTER>4004128 



<tr> 



<td> 



<tr> 



<td> 



<tr> 



<td>ALIGN=CENTER VALIGN=MIDDLE><INPUT TYPE="radio' 




19a 
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NAM E="wf-a pi-item" 

VALUE= M 7777775F5363686564756C655F5265736572766174696F6E007777775F5265736572766 
1 74696F6E5F526571 756573745F383500454D41 47454E54007765626 1 67656E7400776562666D6 
167656E74"> 

<td> NOWRAP>Schedule car. 

<td>Ready 

<td>www_Schedule_Reservation 

<td>www_Reservation Request_86 

<td>Schedu!e_Reservation 

<td ALIGN=CENTER>09-03-1996 03:01:15PM 

<td ALIGN=CENTER>4004128 

<td> 

<! - - "wf-cgi-rend" - - > 

</TABLE> 

<hr> 

<h4>Next, select which action you want to perform and 
<br> 

press the button below. 
</h4> 

<TABLE BORDER=0> 

<tr> 

<td> 

<INPUT TYPE="radio" NAME=Vf-cgi-submit M VALUE="3 M CHECKED> 

Start work item 

<tr> 

<td> 

<INPUT TYPE="radio M NAME="wf-cgi-submit M VALUE='*0"> 

Refresh list 

</TABLE> 

<! - - Start Submit Button & hidden variables > 

<hr> 

<INPUT TYPE="submit" VALUE= M Perform Action"> 

<INPUT TYPE="hidden" NAME="wf-cgi-html" VALUE=7exm/html/exmp5ewi.htm M > 

<! - - End Submit Button & hidden variables > 

<hr> 

<ahref=7exn/html/exmp5ehp.htm"> 

<img src=7exm/icons/exmp5efm.gir ALIGN=MIDDLE HSPACE=5> 

Return to home page 

</a> 

<ahref=7exn/html/exmp5d20.htm"> 

<img src=7exrri/icons/exmp5eoh.gif ' ALIGN=MIDDLE HSPACE=5> 



Help 
</a> 
<hr> 
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<TABLE BORDER=1> 
<tr> 

<td>RowMark User 
<td>FlowMark Database 
<td>FlowMark Server 
<td>Date & Time 
<tr> 

<td>FMAGENT 
<td>WWWDB 
<td>WWWSRV 
<td>08:27:33 09/05/96 
</table> 

<INPUT TYPE="hidden" NAM E-'wf-f frig-key" VAULE="webfmagent"> 

</FORM> 

</BODY> 

</HTML> 
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wf-api-item= , 7777775F5363686564756C655F5265736572766174696F6E007777775F52657365 
727661 74696F6E5F526571 756573745F383500454D41 47454E540077656261 67656E7400776562 
666D6167656E74 n &vtf-cgh-submrt=3^^ 
key=webfmagent 



FIG. 20 
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<HTML> 

<FORM ACTION=7cgi-prot/exmp5cgi.exe" METHOD="POST"> 
<HEAD> 

<TITLE>Customer lnformation</TITLE> 
<B>Customer Reservation lnformation</B> 
<table border=1> 

<tr><td>Name</td><td>Member Number</ld><td>Resv Number</td> 

<tr><td ><! - - "wf-act-name" - - ></td> 

<td align= : right> M wf-act-membno"</td> 

<td align=right>"wf-act-resvno"</td> 

</lable> 

<p><! - - "wf-act-outmsg" - - > 
<HR> 

<B>Move An Available Ca</B> 

<P><INPUT TYPE=*'radio" NAME=cars CHECKED> <! - - "wf-act-carr - - > 
<P><iNPUT TYPE="radio" NAME=cars ><! - - "wf-act-car2" - - > 
<P><INPUT TYPE= ,, radio" NAME=cars ><! - - "wf-act-car3" - - > 
<P><INPUT TYPE="radio" NAME=cars ><! - - "wf-act-car4" - - > 
<HR> 

ONPUT TYPE="submit" NAME= M move M VALUE-"Move Car"> 
<INPUT TYPE="submit" NAME= H cancel" VALUE="Cancer> 
<INPUT TYPE= ,, hidden H NAME="wf-cgi-submr VALUE- '13"> 
</FORM> 
</HTML> 
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<HTML> 

<FORM ACTION="/cghprot/exmp5cgi.exe w METHOD="POST"> 
<HEAD> 

<TITLE>Customer lnformation</TITLE> 
<B>Customer Reservation Information</B> 
<table border=1> 

<tr><td>Name</td><td>Member Number</td><td>Resv Number</td> 

<tr><td >John E. Doe</td> 

<td aligri=right>1234</td> 

<td align=right>4412</td> 

</table> 

<p>Reservation Date: <B>09/24/96</B> Days Requested: 

<B>4</B><P>Car Type Requested: <B>Luxery</B><P>Origin: <B>Nevada, IA</b> 

<HR> 

<B>Move An Available Ca</B> 

<P><INPUT TYPE="radio" NAME-cars CHECKED> XYD123 Pontiac Grand Am 

<P><INPUT TYPE="radio" NAME=cars >Chevy Camaro Z28 

<P><INPUT TYPE="radio n NAME=cars >Chevrolet Lumina 

<P><INPUT TYPE- 'radio" NAME=cars >Oldmobile Cutlass Supreme 

<HR> 

<INPUT TYPE="submit" NAME-'move" VALUE="Move Car"> 
<INPUT TYPE= w submit M NAME="cancer VALUE="Cancer> 
<INPUTTYPE= M hkJden u NAME^wf-c^hsubmiT VALUE="13"> 
<INPUT TYPE="hidden" NAME="wf-fmig-handle M 

VALUE= , 7777775F4361725F556E617661696C61626C65007777775F5265736572766174696F6E5F 
526571 756573745F3837"> 

<INPUT TYPE^'hidden" NAME^'wf-fmig-key" VALUE= M webfmagent H > 

</FORM> 

</HTML> 
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COMPUTER APPARATUS AND METHOD 
FOR PROVIDING A COMMON USER 

INTERFACE FOR SOFTWARE 
APPLICATIONS ACCESSED VIA THE 
WORLD-WIDE WEB 

RELATED APPLICATION 

This application is related to the following U.S. patent 
applications: "Computer Apparatus and Method for Com- 
municating Between Software Applications and Computers 
on the World-Wide Web Using Universal Variable 
Handling", Ser. No. 08/780,014, filed Dec. 23, 1996, "Com- 
puter Apparatus and Method for Providing Security Check- 
ing for Software Applications Accessed via the World-Wide 
Web", Ser. No. 08/772,737, filed Dec. 23, 1996; "Computer 
Apparatus and Method Including a Disconnect Mechanism 
for Communicating Between Software Applications and 
Computers on the World-Wide Web", Ser. No. 08/772,738, 
filed Dec. 23, 1996; and "Computer Apparatus and Method 
for Communicating Between Software Applications and 
Computers on the World-Wide Web", Ser. No. 08/780,013, 
filed Dec. 23, 1996. 

BACKGROUND OF THE INVENTION 

1. Technical Field 

This invention generally relates to interactions on the 
world-wide web, and more specifically relates to an appa- 
ratus and method for providing access to software applica- 
tions via the world-wide web. 

2. Background Art 

The development of the ED VAC computer system of 
1948 is often cited as the beginning of the computer era. 
Since that time, computer systems have evolved into 
extremely sophisticated devices, and computer systems may 
be found in many different settings. Computer systems 
typically include a combination of hardware (e.g., 
semiconductors, circuit boards, etc.) and software (e.g., 
computer programs). As advances in semiconductor pro- 
cessing and computer architecture push the performance of 
the computer hardware higher, more sophisticated computer 
software has evolved to take advantage of the higher per- 
formance of the hardware, resulting in computer systems 
today that are much more powerful than those that existed 
just a few years ago. 

Computer systems typically include operating system 
software that control the basic function of the computer, and 
one or more software applications that run under the control 
of the operating system to perform desired tasks. For 
example, a typical IBM Personal Computer may run the 
OS/2 operating system, and under the control of the OS/2 
operating system, a user may execute an application 
program, such as a word processor. As the capabilities of 
computer systems have increased, the software applications 
designed for high performance computer systems have 
become extremely powerful. 

Other changes in technology have also profoundly 
affected how we use computers. For example, the wide- 
spread proliferation of computers prompted the develop- 
ment of computer networks that allow computers to com- 
municate with each other. With the introduction of the 
personal computer (PC), computing became accessible to 
large numbers of people. Networks for personal computers 
were developed to allow individual users to communicate 
with each other. In this manner, a large number of people 
within a company could communicate simultaneously over 



•2,905 

2 

a network with a software application running on a single 
computer system. 

One significant computer network that has recently 
become very popular is the Internet. The Internet grew out 

5 of the modern proliferation of computers and networks, and 
has evolved into a sophisticated worldwide network of 
computer systems linked together by web pages that collec- 
tively make up the "world-wide web", or WWW. A user at 
an individual PC (i.e., workstation) that wishes to access the 

10 WWW typically does so using a software application known 
as a web browser. A web browser makes a connection via the 
WWW to other computers known as web servers, and 
receives information from the web servers that is displayed 
on the user's workstation. Information displayed to the user 

35 is typically organized into pages that are constructed using 
a specialized language called Hypertext Markup Language 
(HTML). Web browsers that use HTML are now available 
for almost every computer system on the market, making the 
WWW accessible to practically anyone who has access to a 

20 computer and a modem. Although the WWW is becoming 
increasingly popular, the rapid growth and expansion of 
computer users accessing the WWW has brought along with 
it concomitant problems. Some of these problems are iden- 
tified below. 

25 With the growing popularity of the Internet and the 
WWW, businesses have recognized that the Internet pro- 
vides a new way to boost both sales and efficiency. If a user 
with a web browser can interact directly with a company's 
software application, a given transaction will be simplified. 

30 For example, let's evaluate how a person typically reserves 
a rental car. The person calls the rental car agency, and then 
gives his or her information (i.e., name, address, credit card 
number, etc.) to the rental car agent over the phone. The 
agent must enter the information into the car rental software 

35 application to initialize the process to reserve a car. A more 
efficient car reservation system for web users would allow 
the user to interact directly with the car rental software 
application. This would eliminate many of the tasks that the 
car rental agent now performs. However, devising a car 

40 rental software application that is capable of interacting 
directly with web users would require creating custom 
interface software. Likewise, a custom user interface must 
be created for each different software application that is to 
be accessed via the WWW. The preferred interface would be 

45 a graphical user interface (GUI). The process of generating 
a custom GUI for a software application is time consuming 
and expeasive, and typically results in a proprietary user 
interface that cannot be used for communicating with other 
software applications. This means that a company has a 

so significant disincentive that would prevent them from pro- 
viding access to their software applications via the WWW. 

In addition, many computer users have adopted very 
different forms of hardware/software computer platforms. 
For example, while the IBM-compatible personal computer 

55 is the most common type of computer system available 
today, other vendors have developed very different product 
lines with significant numbers of computer systems pres- 
ently installed and in use. These disparate hardware systems 
typically utilize completely different operating systems. The 

60 existence of these various different hardware and software 
systems will typically require a completely new program- 
ming and development effort to "port" or translate the 
custom GUI for a given software application to each differ- 
ent hardware platform. Many companies will only support 

65 the most popular hardware/software combinations, thereby 
limiting market share and reducing the number of users who 
have access to the software application. 



04/23/2004, EAST Version: 1.4.1 



5,892,905 

3 4 

The problem of multiple unrelated user interfaces high- market today. In addition, since HTML is a fairly well 

lights yet another problem that may also prevent the rapid controlled and standardized language, new software appli- 

adoption of software applications via the WWW. Assuming cation features can be added as they are developed and 

a company has absorbed the cost of developing a custom supported by HTML. In addition, since HTML is a widely 

GUI for a given software application, the GUI developed by 5 adopted, non-proprietary technology, the present invention 

one company will most likely differ significantly from the can provide open access to a large market for even very 

GUI developed by another company for their respective small software developers. Further, the present invention 

software applications. Typically, each software vendor will also allows software developers to adopt a standard access 

create a custom GUI for each specific software application protocol, which allows them to provide support for any 

so that whenever a user accesses the software application via io computer system which is capable of utilizing a HTML 

the WWW, the user can access the specific features of the cognizant browser. Finally, by providing easy-to-implement, 

software application. However, since every product has standardized solutions to the issues of user interface, 

different features and every vendor has differing standards authentication/security, and web transaction support, the 

for application /user interaction, the result is often a vastly common user interface of the present invention overcomes 

different user interface for each and every software appli- 15 the limitations existing in previous solutions, 

cation that the user encounters. The user is often forced to llie foregoing and other features and advantages of the 

"re-learn" basic skills for interacting with each and every invention will be apparent from the following more particu- 

software application they wish to access. lar description of preferred embodiments of the invention, as 

The current situation for accessing software over the illustrated in the accompanying drawings. 

WWW is somewhat analogous to the early days of the 20 

personal computer. In the early 1980s, the IBM personal BRIEF DESCRIPTION OF DRAWINGS 

computer (PC) was introduced and was quickly adopted as ™ f . , r4 , t . . ... 

. j j j u. j 1 .r U The preferred embodiments of the present invention will 

£ 6 "fTl T ■ ff P . , rm -, 7T'a eV6 S hereinafter be described in conjunction witb the appended 

.hough the hardware platform was relatively standard each drawings>wherelikedesignado i denotelikeeleme ^ iand . 

independent software vendor created significantly different 25 0 °^ 

user interfaces for their respective application programs. FIG - 1 1S a block diagram of a preferred embodiment of 

Thus, in turn, proved to be an impediment to the rapid the P resent invention; 

adoption of new application programs by the users of FIG. 2 is a block diagram of a transaction between a client 

personal computers. Because users were unable to efficiently workstation and a web server; 

use new software applications without extensive training, 30 FIG. 3 is a block diagram of a system according to a 

many new software applications were not adopted. preferred embodiment of the present invention that allows 

Today, however, new standards have been developed and access to a software application over the World-Wide Web 

adopted for personal computer software applications which from a standard web browser; 

dramatically reduce the amount of re-learning that must take FIG. 4 is a more detailed block diagram of the system of 

place for new software applications. State-of-the-art GUI 35 pj G 3^ fa^r adapted to access FlowMark workflow 

operating systems such as IBM's OS2 have standardized application software over the World-Wide Web; 

many common user actions and provided independent soft- FIG. 5 is a flow diagram of a method in accordance with 

ware developers and vendors with the < hooks or program- a preferred embodiment of the present invention that illus- 

ming tools necessary to access most standard user interface trates some of the featUfes of the common ^ interface; 

components and features, thereby dramatically reducing the 40 . 

. . c , j t /• . m • * j j FIG. 6 is a process flow diagram of the security checking 

learning curve for end-users. Unfortunately, this standard- f f p fr T - 

ization effort has not yet penetrated the WWW In fact, the feature or HO. a; 

ready availability of the WWW as a delivery system for FIG. 7 is a process flow diagram of the template/HTML 

software applications has exacerbated the rapid proliferation variable feature of FIG. 5; 

of the disparate software now available over the WWW. In 45 FIG. 8 is a process flow diagram of the resume/disconnect 

addition, some of the most powerful software applications API features of FIG. 5; 

available have non-intuitive, non-graphical user interfaces. FIG. 9 is a tabular representation of a portion of a user 

The process of re-learning a new interface for each new library; 

application tends to be tedious, time-consuming and non- FIG. 10 is a block diagram of a preferred embodiment of 

productive. Therefore, even though many software applica- 50 tne p res ent invention when expanded to a multi-user envi- 

tions may be accessible over the WWW today, learning how ronment; 

to access these various programs can be time-consuming, pjc. 11 is an example of HTML code used to generate a 

frustrating, and intimidating for the end-user. car rental reservation form in accordance with a preferred 

DISCLOSURE OF INVENTION 55 embodiment of the present invention; 

Recognizing both the importance of providing access to FIG - l ? is an example of a data stream generated by a user 

software applications over the WWW, and the current limi- re 4 uest from a web browser m accordance with a preferred 

tations of existing solutions, the present invention provides embodiment of the present invention; 

the capability to easily access many different application FIG * 13 k an example of HTML code used to generate a 

programs over the WWW via a standardized GUI. By eo reservation confirmation template in accordance with a 

providing standard procedures, routines, tools, and software preferred embodiment of the present invention; 

"hooks" for accessing software applications over the WWW, FIG. 14 is an example of the HTML code of FIG. 10 after 

software developers can concentrate on the functionality of processing by a CGI in accordance with a preferred embodi- 

the application program and easily use HTML to provide a ment of the present invention; 

GUI interface for the application program. 65 FIG. 15 is an example of web browser formatted data in 

As mentioned above, HTML is a well-known language accordance with a preferred embodiment of the present 

which can be used by almost any computer system on the invention; 
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FIG. 16 is an example of HTML code used to generate a connection between computers, whether currently known or 

web page for a car rental reservation agent in accordance developed in the future. 

with a preferred embodiment of the present invention; It should be noted that client workstation 210 and web 

FIG. 17 is an example of web server generated data in server computer system 220 may be the same physical 

accordance with a preferred embodiment of the present 5 and/or logical computer -system. Web browser 212 typicaUy 

invention- displays pages of HTML data to a user at client workstation 

\o , , ITfri/T « 210. Other types of data (besides HTML) may also be 

FIGS. ISa and ISb provide an example of HTML code tran smitted to web browser 212, including text data, graphi- 

used to generate a car rental agent work list in accordance cal data (e g ? Graphic Image Format (GIF) files)> audio data 

with a preferred embodiment of the present invention; or ^und files (e.g., WAV files), Java applets (executable 

FIGS. 19a, 19b, and 19c provide an example of HTML code) and a specialized data form known as Multipurpose 

code of FIG. 15 after processing by a CGI in accordance Internet Mail Extensions (MIME) data (which may include 

with a preferred embodiment of the present invention; combinations of the foregoing and other data types). 

FIG. 20 is an example of the data stream received from a Wel > server application 222 is a software program running 

web browser by a CGI in accordance with a preferred 35 00 web server computer system 220 that allows a user at 

embodiment of the present invention; chent workstation 210 to access information controlled by 

. r T ,™,T , . web server 220. One preferred embodiment of web server 

FIG. 21 is an example of HTMLcode used to generate an application 222 in accordance with the present invention is 

automobile availability page in accordance with a preferred a commer cial web server application such as IBM's Internet 

embodiment of the present invention; Connection Server. Other applications are also compatible 

FIG. 22 is an example of the HTML code of FIGS. 18a 20 with the present invention. Web server computer system 220 

and 186 after processing by a CGI in accordance with a typically outputs pages of HTML data to WEB browser 212 

preferred embodiment of the present invention; and in response to requests by web browser 212 that reflect 

FIG. 23 is a process model diagram that describes a takeQ bv , tne j user at client workstation 210. In 

WWW transaction with a software application using a ^dition, ™ ex P lai ^ above web server computer system 

preferred embodiment of the present invention. 25 22 ° m W ^ other ^? s P f ?«* £ brows f 212 as 

r r well. Output data may include static HTML pages (meaning 

BEST MODE FOR CARRYING OUT THE that the content of the P a S e does DOt var y)> or ma y 

INVENTION data l ^ at must be dynamically determined and inserted into 

the output data. Web server application 222 may dynami- 

The present invention relates to transactions via the 30 cally build output data (e.g., an HTML page) from parts that 

WWW. For those individuals who are not Internet or WWW it retrieves from memory within web server computer sys- 

experts, the Overview section below presents many basic tern 220 or from other computer systems, or may simply 

concepts that will help to understand the invention. P^s through an HTML page or other information that has 

been developed at an earlier time or by another computer. 

OVERVIEW 35 Web browser 212 typically interacts with web server 

application 222 by transmitting input (e.g., a Uniform 

Web Transactions Resource Locator (URL) or an HTML page) over connec- 

Referring now to FIG. 2, a typical transaction between a | ion 2 }?> l ° web corn P* er ^220. ™* input is 

standard web browser 212 running on a client workstation l X&. TwT P ? T ™ sfef Pr ° t0C ° 1 

, , ... . t (HTTP) 1.0. Web server computer system 220 running web 

210 and a web server application 222 running on a web 40 ^ [ lication 222 receiv £ s tne { x from web b * wser 

server computer system 220 occurs over a connection 216. 2n> and in 0llt u data ( an HTML page) to 
Client workstation 210 may be coupled to other computer browser 212 ^ process described above illustrates a basic 
systems via a local area network (LAN) or via any other type transaction over the Internet, recognizing that many details 
of computer network or other interconnection. Likewise, anc j variations that are within the scope of the present 
web server computer system 220 may be coupled to other 45 invention are not disclosed herein for the purpose of pro- 
computer systems as well. Client workstation 210 may be viding a simple context for understanding the concepts of 
any computer that is capable of providing access to the the present invention. 

WWW by using web browser 212. This would include Web server computer system 220 may also have numer- 
handheld, portable or laptop computers, standard desktop 0 us other software components, including Common Gate- 
computer systems, Personal Digital Assistants (PDAs), non- 50 way Interface (CGI) modules. CGI modules may be used as 
programmable terminals connected to a mainframe, etc. an interface between web server application 222 and other 
Web browser 212 is a software program running on client software applications. For example, a CGI module could 
workstation 210 that allows a user at client workstation 210 provide a link between web server 222 and a calendar 
to communicate with other computers over connection 216. software application, allowing web server 222, for example, 
Web browser 212 would include any web browser which is 55 to insert dynamic calendar information into the web pages it 
capable of transmitting and receiving data over the WWW. outputs to web browsers 212. Thus, CGIs allow web servers 
This includes commercial software applications such as to distribute dynamic data from other software applications. 
IBM's WebExplorer, Netscape Navigator, Microsoft Inter- Unfortunately, programming a CGI is a time-consuming 
net Explorer, Apple Computer's CyberDog, and any other task, given the numerous specifications that a CGI should 
software application which now exists or which may be 60 satisfy. Furthermore, a separate CGI is generally needed for 
developed in the future for accessing or processing infor- each different software application to be interfaced with the 
mation over the WWW. A preferred embodiment for con- web server 222. Additionally, different CGI's may be 
nection 216 is any suitable connection to the Internet, required to perform different functions, such as granting 
including a hardwired connection, telephone access via a d ifferent users different levels of access to the same software 
modem or high-speed Tl line, infrared or other wireless 65 application or data. In general, as the number of CGIs 
communications, computer network communications increases, the performance of web server computer system 
(whether over a wire or wireless), or any other suitable 220 decreases. 
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Web Pages 

Referring now to FIG. 3, a web page is primarily visual 
data that is intended to be displayed on the monitor of client 
workstation 210. Web pages are generally written in Hyper- 
text Markup Language (HTML). When web server applica- 
tion 222 running on web server computer system 220 
receives a web page request from web browser 212, it will 
build a web page in HTML or retrieve a file containing a 
pre-built web page and send it across connection 216 to the 
requesting web browser 212. Web browser 212 understands 
HTML and interprets it and outputs the web page to the 
monitor of client workstation 210. This resulting web page, 
displayed on the user's screen, may contain text, graphics, 
and links (which are URL addresses of other web pages.) 
These other web pages (i.e., those represented by links) may 
be on the same or on different web servers. The user can 
retrieve these other web pages by clicking on these links 
using a mouse or other pointing device. This entire system 
of web pages with links to other web pages on other servers 
across the world collectively comprise the "World-Wide 
Web" (WWW). 

Some web pages are designed to elicit input from web 
browser 212. For example, a web page may request the 
user's name in an HTML form and require the user to select 
a particular function using an HTML radio button. These 
requests are sent to web browser 212 from web server 222. 
The web user responds by entering the requested informa- 
tion and resubmitting the page back to web server 222, 
which parses the inputted data received from the user. 
Unfortunately, the user may not respond immediately to the 
request for input. In fact, it is foreseeable that a user may 
wait several minutes, hours, or even days before submitting 
the requested input or, alternatively, may disconnect without 
ever completing the transaction. During this time, web 
server 222 typically waits for the input with various pro- 
cesses still running, waiting for the anticipated response. 
This can lead to problems where running processes are left 
active as they wait for input, inefficiently monopolizing the 
resources of web server 222. 

APIs 

Application Programming Interfaces (APIs) are used by 
program developers to provide access to certain features of 
a given software application. Each application program will 
have APIs that allow third parties to access certain features, 
to interface the application program with other programs, 
and to provide access for end-users. While each application 
program will typically have unique APIs, the functionality 
and use of different APIs provided by different vendors can 
often be fairly similar. Some examples of APIs that are 
commonly found in many different software applications are 
presented below for software application 342 running on 
computer system 300 as shown in FIG. 3. 

The SEND API is issued to send data (in the form of 
HTML pages or other types) to web browser 212. Software 
application 342 calls the SEND API which, in turn, transmits 
a send request and sends the data through Internet/ 
application gateway 332 and web server 222 to the appro- 
priate web browser 212. 

The RECEIVE API is issued to receive data from web 
browser 212. This can include CGI data and environment 
data as needed. Software application 342 calls the 
RECEIVE API to direct Internet/application gateway 332 to 
wait for input. Once the input has arrived, Internet/ 
application gateway 332 will pass the data to software 
application 342 for processing. 
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Web Security 

As the WWW has experienced explosive growth in the 
last few years an ever increasing concern is web security. In 
particular, where web browsers and web servers are being 

5 used to provide web -based access to other computer 
resources (i.e., software applications, data files, HTML web 
pages, etc.) those resources must be kept secure. This 
involves assuring that access to those resources is granted 
only to approved web users. 

io In some cases, a system must be provided where different 
users are granted access to different resources accessible 
through the web server. For example, one web server may 
provide web access to two software applications, and each 
software application may provide access to multiple data- 

15 bases. Some users may need access to one software 
application, but not the other, while other users may need 
access to both software applications, but only to specified 
databases controlled by those software applications. If a user 
is authorized to access one of the two software applications, 

2Q and security checking is only performed at the web server 
level, granting access to the user will grant access to both 
software applications, even though the user is not authorized 
to access the second software application. Even if security 
checking is performed before granting access to each soft- 

25 ware application, granting access would allow the user to 
access any of the databases that are accessible by the 
software application. Thus, more sophisticated security 
checking techniques are needed to assure that unapproved 
users cannot gain access to sensitive resources while access 

30 for approved users is maintained. 

Typical web security uses a password and userlD com- 
bination to authenticate a particular web user to access a 
particular web server or specific resources through that web 
server. When a web user attempts to access such a protected 

35 resource, he must supply a userlD and password. This is 
typically accomplished by having the web server prompt the 
web user to enter a userlD and password, which is then 
stored by the web browser and transmitted back to the web 
server application for verification/authentication. 

40 This authentication process is typically repeated for each 
specific resource that is accessible through the web server 
application. Thus, a web user that accesses several secure 
resources is prompted and required to enter his or her 
password and userlDs for each resource. For example, a user 

45 might have to enter his or her password and userlD to gain 
access to a web server, a second password and userlD to gain 
access to a software application through the web server and 
a third password and third userlD to gain access to a 
particular software application database. This may require 

50 the user to memorize a large number of passwords and 
userlDs in addition to the inconvenience of having to submit 
them multiple times. Even if the password and userlD are 
the same at each level, it becomes tedious to repetitively 
enter the same information again and again. 

55 In traditional web server authentication systems, the web 
browser resends the password and userlD each time a 
submission is sent to the web server. Thus, the password and 
userlD are repeatedly subjected to the risk of "snooping" 
(i.e., the unauthorized and unwanted interception of the 

eo transmissions between web server and web browser). Some 
systems try to limit this problem by regularly the users to 
change their passwords and userlD's, but this can be a 
significant problem where multiple passwords and multiple 
userlD's are required to access multiple software applica- 

65 tions. 

The problems associated with the prior art solutions have 
lead some system operators to remove additional security 
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protection measures and rely only on the web server authen- microprocessor, or may comprise any suitable number of 
tication with a userlD and password. Again, this solution integrated circuit devices and/or circuit boards working in 
should be adopted only where a high risk of unauthorized cooperation to accomplish the functions of a central pro- 
access to the web-accessible resources is acceptable. cessing unit. All CPUs are capable of suitably executing the 

5 programs contained within memory 130 and acting in 

DETAILED DESCRIPTION response to those programs or other activities that may occur 

According to the present invention, an apparatus and * n s y s * em 
method for providing a graphical, common user interface to Memory 130 is any type of memory known to those 
multiple software applications provided by multiple soft- skilled in the art. This would include Dynamic Random 
ware vendors from a web browser over the WWW is 10 Access Memory (DRAM), Static RAM (SRAM), flash 
disclosed. The system includes one or more computers memory, cache memory, etc. While not explicitly shown in 
executing a web browser, a web server application, an FIG * memory 130 may be a single type of memory 
application gateway, and at least one software application. component or may be composed of many different types of 
The system and method allows a user of a web browser to memory components. For example, web browser 212 run- 
access multiple software applications using a common user 15 nin S in location 132 may be part of system 100 s cache 
interface. The user inputs data via the web browser, which memory, In addition, memory 130 and CPUs 110 may be 
data is communicated to the web server application. The distributed across several different computers that collec- 
web server application authenticates the web browser and tivel y comprise system 100. For example, web browser 212 
passes appropriate input data to an application gateway, ma Y reside on one computer with CPU a , web server appli- 
including data to uniquely identify and track the user's 20 cation 222 ma y reside on another computer system with a 
request. Tne application gateway then facilitates a response separate CPU 2 , Internet/application gateway 332 may reside 
to the request by formatting the appropriate commands to on a third computer system with a different CPU,,^ and 
the software application. The software application responds software application 342 may reside on a fourth computer 
by outputting the appropriate data to the application gate- witn a different CPU„. Computer system 100 of FIG, 1 
way. The output data includes an identifier that can be used 25 simply illustrates many of the salient features of the 
to match the output data with the specific web browser that invention, without limitation regarding the physical location 
requested the output data. This system also provides simul- of CPUs 110 or memory locations within memory 130. 
taneous access to numerous software applications for Bus 140 serves to transmit programs, data, status and 
numerous web browsers. In addition, the present invention other forms of information or signals between the various 
allows any standard WWW HTML browser to act as a truly 30 components of system 100, A preferred embodiment for bus 
platform independent client for the server and provides a 140 is any suitable physical or logical means of connecting 
consistent and effective end-user interface for all server computer systems and components known to those skilled in 
subsystems to interact with. the art. This includes, but is not limited to, direct hard -wired 

There are four main components which, when coordi- connections, Internet connections, Intranet connections, 

nated into a comprehensive GUI interface, comprise a fiber °P tics > infrared (IR) and other forms of wireless 

preferred embodiment of the present invention: custom connections. It is anticipated that many alternative methods 

application programming interfaces (APIs) that provide and material for connecting computer systems and compo- 

WWW transaction support technology capable of receiving nents ^ be readily adapted for use with the present 

and transmitting Multipurpose Internet Mail Extension 40 invention. This would include those methods and materials 

(MIME) data formats to a single client application; a secu- not presently known but developed in the future, 

rity mechanism that can provide support for server-side Terminal interface 150 allows human users to communi- 

security and simultaneously shield the end-user from the cate with system 100, normally through programmable 

intricacies of the security system; a mechanism that defines workstation 170. Although system 100 as depicted in FIG, 1 

common WWW user interface components such as HTML 45 contains only a single workstation 170, it should be under- 

templates/forms that can address a majority of typical appli- stood that the actual number of workstations attached to 

cation processing input and output requirements; and a system 100 will be a function of system design and user 

disconnect processing mechanism which automates the han- preference. Workstation 170 may also be a dumb terminal or 

dling of complex issues ' such as disconnects, processing other non-programmable computer input/output device 

timeouts, client and/or server abnormal exits and other 5Q which allows human interaction with computer system 100. 

typical processing issues. Each of the four subsystems will Auxiliary storage interface 160 represents any method of 

be described in greater detail in the sections below. interfacing a storage apparatus to a computer system known 

Referring now to FIG. 1, a computer system in accor- to those skilled in the art. Auxiliary storage interface 160 

dance with a preferred embodiment of the present invention allows auxiliary storage devices such as DASD 180 to be 

includes: a plurality of Central Processing Units (CPUs) 55 attached to and communicate with the other components of 

110; a terminal interface 150; an auxiliary storage interface system 100. While only one auxiliary storage interface 160 

160; a workstation 170; a Direct Access Storage Device is shown, the present invention anticipates multiple inter- 

(DASD) 180; a floppy disk 190; a bus 140; and a memory faces and multiple auxiliary storage devices such as DASD 

130 which includes multiple locations for containing various 180. As shown in FIG. 1, DASD 180 may be a floppy disk 

software programs. In this example, memory 130 includes a go drive which is capable of reading and writing programs or 

web browser 212 running in location 132, a web server data on floppy disk 190. DASD 180 may also be any other 

application 222 running in location 134, an Internet/ type of DASD known to those skilled in the art. This would 

application gateway program 332 running in location 136, include CD-ROM drives, hard disk drives, optical drives, 

and a software application 342 running in location 138. etc. Floppy disk 190 represents a typical 3.5 inch magnetic 

CPUs 110 perform computation and control functions of 65 media disk known to those skilled in the art. 

system 100. All CPUs associated with system 100 may each Referring now to FIG. 5, a method 500 for accessing 

individually comprise a single integrated circuit, such as a software applications over the WWW via a GUI according 
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to a preferred embodiment of the present invention is shown. 
To initiate access to a software application over the WWW, 
a user will take some action which generates input from the 
web browser to the web server (step 510). The web server 
will determine if security checking is required to perform the 
necessary actions associated with the users request (step 
520). If the user has requested access to a protected resource, 
the appropriate security checking mechanism is invoked and 
the required authentication will be accomplished (step 522). 
The user's request may involve gathering and transferring 
input data from the user at various stages. If so, then an 
HTML template with HTML substitution variables may be 
evaluated as part of the overall process or transaction (step 
530). Any necessary HTML template and variable process- 
ing will be accomplished as required (step 532). At some 
point, the user may not respond to the web browser's request 
and a DISCONNECT API may be issued to temporarily 
suspend processing the user's request. Alternatively, some 
prior user interaction may have already occurred and a 
DISCONNECT API may have previously been invoked. In 
either case, it may be necessary to suspend a current process 
or to resume a previously suspended process (step 540). If 
necessary, the appropriate process will be restarted or sus- 
pended as required (step 542). Finally, the actual user 
request can be evaluated and the appropriate response can be 
generated by the software application (step 550). After the 
requested function has been performed, the results generated 
by the user's request are displayed by the web browser (step 
560). Additional web browser input can be processed in a 
similar fashion by repeating the steps listed above, if 
required. 

While the steps shown in FIG. 5 have been described and 
illustrated as being independent and sequential, these vari- 
ous steps are not necessarily sequential and are preferably 
integrated within the same web transaction, as illustrated in 
the rental car example shown below. The steps may be 
performed as needed and in any combination or order 
desired. Some software applications may require completion 
of all of the steps shown while other processes and requests 
may require only one or two of the steps for completion. The 
actual sequence of steps and the detailed requirements for 
each step will remain largely a design choice for a specific 
software application. 

SECURITY MECHANISM- FLO WM ARK 
EXAMPLE 

Referring now to FIGS. 2 and 6, step 522 of FIG. 5 is 
performed by a security mechanism. While this step is 
described with reference to accessing software applications, 
it is equally applicable when used to access other computer 
resources, such as databases and networks. As mentioned 
above, a user at client workstation 210 performs an action 
that causes web browser 212 to request access to a software 
application via the WWW by inputting data to web server 
application 222. The input data may include an HTML form 
with input blanks used for entering appropriate authentica- 
tion data. After the authentication data is entered, the user 
submits the data to web server application 222 (step 621). 
According to a preferred embodiment, the authentication 
data includes a userlD, a password and a key. The userlD 
and password can comprise typical web-based userlD and 
passwords. The key can comprise any set of data that serves 
as an identification mechanism. For the purpose of 
illustration, one possible key is "flowmarkuser01975." 

The web server uses the userlD and password to authen- 
ticate the user according to standard web authentication 
procedures (step 623). When the user is properly autbcnti- 
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cated by web server application 222, the userlD and key are 
passed to the gateway 332 along with the request for access 
to a particular software application (step 625). Gateway 332 
compares the userlD and key to userlDs and keys stored in 

5 a user library 620 (step 627). User library 620 preferably 
stores the user information for a plurality of software 
applications that are to be accessed through gateway 332. 
User library 620 can be structured in a wide variety of ways. 
For example, each software application could have the same 

10 key for all approved users. Thus, when the gateway 332 
receives the key it compares users with the submitted userlD 
in the library 620 for the application specified by the key. 
Alternatively, each key can be unique and the gateway will 
search the entire library for a matching key and userlD. 

15 Regardless of the specific implementation, user library 
620 contains the authentication data needed to access the 
corresponding software applications for each authorized 
user. Thus, gateway 332 can retrieve the required software 
application authentication data (step 629). With the software 

20 authentication data, gateway 332 can create a communica- 
tion connection to software application 342 (step 631). In 
particular, in a preferred embodiment, user library 620 can 
provide the same authentication data that would normally be 
required to grant non-web based access to each software 

25 application. Because user library 620 stores the normal 
authentication data for each software application, gateway 
332 can use normal security procedures provided by the 
native interface to software application 342. A secure web 
connection to software application 342 can thus be provided 

30 without altering the native software application security 
system or requiring that a system administrator implement 
and maintain a special security system for providing web 
access to software application 342. In addition, the user need 
not know or understand the native software application 

35 security system, since the user interacts with the GUI, 
which, in turn, interacts with the native security system. 

In this example, the key and userlD correspond to a 
userlD and key stored in user library 620 for software 
application 342. The userlD and key are used to locate 

40 authentication information for the software applications) 
that the user is authorized to access. If the userlD and key 
are not found in user library 620, the user is not authorized 
to access the requested resources through gateway 332. The 
software application authentication data stored in user 

45 library 620 may include workgroup user names, workgroup 
passwords, application database identifiers, or any other 
information that is needed to facilitate communication with 
software application 342 according to the native security 
system utilized by software application 342. Because this 

so authentication data is never sent across the WWW, it is not 
subjected to the risk of being snooped by unauthorized users. 

The security mechanism of the present invention provides 
secure access and authentication processes for a software 
application from a web browser over the WWW. The 

55 mechanism provides secure access to multiple software 
applications or other computer resources without requiring 
the user to memorize multiple passwords and userlDs by 
using a library of users containing authentication data for the 
multiple software applications. The mechanism includes one 

60 or more computers executing a web browser, a web server 
application, an application gateway, and a software appli- 
cation after performing appropriate security checks. The 
mechanism allows a user of the web browser to access the 
software application. The user inputs data via the web 

65 browser, which is communicated to the web server applica- 
tion. Web server application then authenticates the web 
browser, and passes appropriate input data to an application 
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gateway, including data to uniquely identify the web 
browser. The application gateway then uses authentication 
data received from the browser to determine whether the 
user of the browser is authorized to access the software 
application. 

In a preferred embodiment, the browser authentication 
information is used to correlate the user with appropriate 
authentication information for the software application. The 
application gateway then uses this new authentication infor- 
mation to gain access (i.e., log on) to the software applica- 
tion. 

Referring now to FIGS. 4, 6 and 9, the security mecha- 
nism of the present invention as used to access Flowmark 
application 342 over the WWW is illustrated. As explained 
above, a user who needs to access FlowMark application 
342 over the WWW will take some action that will generate 
a data stream to web server application 222. Web server 
application 222 will examine the user's data stream to 
determine what action should be taken to fulfill the user's 
request. If the user-requested information requires access to 
FlowMark application 344 there will be a command embed- 
ded in the data stream generated from web browser 212 that 
directs web server application 222 to pass control to CGI 
420. In this example, access to CGI 420 is protected to keep 
unauthorized users from accessing FlowMark application 
342 via the WWW. In order to gain access to CGI 420, the 
user must be authenticated by web server application 222. 
When web server application 222 sees the CGI command in 
the data stream generated by web browser 212, it requests a 
password and user identification (userlD) from the user via 
web browser application 222. 

Additionally, according to the preferred embodiment the 
web server application 222 requires a key from web browser 
212. There are two primary ways to provide and deliver a 
key to the web server from the web browser. First, the key 
can be embedded in the original HTML page that is sub- 
mitted back to the web server. This is the preferred method 
where control of access is not a primary concern. For 
example, embedding the key in the HTML form would be 
useful if the submitted HTML form is one used by visitors 
or "guests" to access limited functions of the software 
application. By embedding the key into the form that is 
passed to the CGI, the gateway is told automatically to grant 
the user access to the software application corresponding to 
the "guest" key. Additionally, for this situation the userlD 
and password could also be embedded. With the userlD, 
password and key embedded for all in the HTML form, the 
required authentication is provided without the user even 
being aware that his or her access has been authenticated. 

The key is preferably embedded by assigning a variable 
value that is recognized by the gateway as a key in the 
HTML form. Web server 222 receives the form, passes 
control to CGI 420, which parses out the variable with its 
assigned value, then passes this information to FMIG 430. 
FMIG 430 compares the key value and userlD with those 
stored in user library 620. FMIG 430 then retrieves the 
authentication data for the selected software application 
based on the key. 

In a second method for supplying the key, web server 222 
sends a request for the user to input a key to web browser 
212. This method requires the user to enter the value, and 
thus provides additional security to access the software 
application corresponding to the key. Typically a REALM 
request is issued from the web server 222 to the web browser 
212. The REALM request is a well-known software security 
feature which requires the user to input a userlD and 
password in order to gain access to CGI 420, 
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When the web browser 212 receives the request, the user 
must type in the userlD, password and key and submit them 
to web server 222 to proceed. Thus, the web browser 212 
stores and sends the userlD, password and key to web server 

5 application 222. The web server application 222 then 
authenticates the user as one with access to web server 222 
using the userlD and password. Web server 222 stores the 
userlD and password received from the user, and sends the 
userlD and key to the FMIG 430 through CGI 420. FMIG 

10 430 compares the userlD and key with those in user library 
620. If a match is found, the FMIG 430 retrieves the required 
authentication data from the user library corresponding to 
the userlD and key. 
In a preferred embodiment, the authentication data 

15 includes all the information normally necessary to access 
FlowMark through its native non-web based interface. The 
authentication data stored in the user library can thus include 
FlowMark workgroup user names, FlowMark workgroup 
passwords, FlowMark application database identifiers, or 

20 any other information that is needed to facilitate communi- 
cation with the FlowMark application that corresponds to 
the submitted key. Because this authentication data is never 
sent across the WWW, it is not subject to the risk of being 
snooped. 

25 A portion 900 of user library 620, with a format suitable 
for use with FlowMark, is shown in FIG. 9. For each user 
(e.g., user a, user b) there is a corresponding user name, 
password, database server identifier and database identifier 
that provides the needed authentication information for each 

30 listed user to access the FlowMark application 342. Because 
user library 620 stores the normal authentication data for 
FlowMark, FMIG 430 can use normal security procedures 
when connecting to FlowMark. Thus, a secure web connec- 
tion to FlowMark can be provided without having to alter the 

35 normal FlowMark security system. A system administrator 
does not need to implement and maintain special security 
system for web access to FlowMark. The security mecha- 
nism of the present invention allows FMIG 430 to authen- 
ticate the user and establish a connection to FlowMark. 

40 

INTERFACE COMPONENTS MECHANISM 

Referring now to FIGS. 2 and 7, step 532 of FIG. 5 is 
performed by an interface components mechanism that uses 

45 HTML variables and templates. As mentioned above, a user 
performs an action that causes the web browser to request 
access to a software application via the WWW by inputting 
data to web server application 222 (step 718). In this 
example, the input data comprises an URL or other address 

50 data that specifies the location of an HTML template. Web 
server application 222 passes the URL address of the speci- 
fied template to Gateway 332 (step 720). Gateway 332 then 
retrieves and opens the specified HTML template located in 
a template library 719 (step 721). Template library 719 is 

55 preferably co-located with Gateway 332 but can be located 
anywhere as long as it is accessible by Gateway 332. 
Template library 719 preferably contains a wide variety of 
HTML templates that a systems developer can use as 
examples in developing an interface for software application 

60 342. 

In the illustrated example, the URL address specifies 
template 2 of the template library 719. Gateway 332 then 
identifies the variables stored in template 2 (step 723). 
Gateway 332 generates the appropriate commands that the 
65 software application 342 can understand and communicates 
the commands to software application 342. Gateway 332 
then requests the data needed for each substitution variable 
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from software application 342 (step 725). Software appli- from software application 342. The variables are written into 

cation 342 then processes the request for input data (step the HTML templates in such a way that they can be 

727). In processing the request for input data, software identified by Internet/application gateway 332. One such 

application 342 may initiate additional software processes to method involves writing the variables into HTML comments 

generate the data, call other programs that have the data, or 5 arK j using a web server that has the ability to parse variables 

retrieve data for local and/or networked data storage. Soft- located in the comments. 

ware application 342 then returns the requested data to T . . . ^ . . 4 lTTnk , T . , . . 

glteway 332 (step 727). Gateway 332 then substitutes the . In P* vanab K le K s are Tff* T ^ F 8 ? P ? 

variables in the HTML template with the data retrieved from ' n P ut fr ° m * eb browse , r 212 10 Intemet/apphcation gateway 

software application 342 (step 729). Gateway 332 then in 332 ?° d Wtotion 3«. For example, an input 

outputs the HTML template to web server 222 with the real 10 vanab liT mch ! ded m an H™LP"S* t^t specifies the 

data substituted for the substitution variables (step 731). next HTM^age to be sent to web browser 212^In that case, 

Web server application 222 then provides the web server the H™Lp«ge * submitted back to web server 222, 

output data to web browser 212 (step 733). the Internet/application gateway 332 parses out foe vanable 

r,, f .... r , . ./ !•*■ * and directs web server 222 to deliver the specified HTML 

lo facilitate the use of Internet/application gateway 332 i_ i . i_ L 

r i- -i^-i j • page back to web browser 212. 

as a gateway between software application 342 and web r ° 

server 332, a library of HTML templates are provided. The Additionally, the Internet/application gateway 332 can be 

library of HTML templates provide a flexible and easily configured to pass a particular variable from one HTML 

customizable way of providing access to multiple software screen t0 the Dext HTML For example, a variable 

applications, including software application 342 through 20 representing a particular communication instance can be 

web browser 212 without requiring multiple CGI modules. inserled inl ° subsequent HTML screens to allow Internet/ 

Thus, systems operators can create custom web interfaces to application gateway 332 to track a particular user's interac- 

a wide variety of applications, without having to satisfy CGI tl0n Wlth software application 342. 

programming requirements, by using appropriate templates. Substitution variables are variables included in the HTML 

In a preferred embodiment, each of the supplied HTML 2S templates which are used to communicate dynamic data 

templates include one or more variables. When a submission back t0 the web browser. These variables are parsed from the 

is received from a web client that specifies a template, HTML templates by Internet/application gateway 332. The 

Internet/application gateway 332 opens the template. substitution variables are then passed to software application 

Internet/application gateway 332 than parses the template, 342 * Software application 342 then locates the appropriate 

locating the variables inside the template. The values for 30 data represented by the substitution variables. This data can 

these variables are then requested from their associated be generated by software application 342 according to a 

software application. Software application 342 may simply predefined process or can be simply retrieved from the 

retrieve data corresponding to the variables, or may initiate appropriate data storage. 

software processes to generate the appropriate data. By User-defined variables can be added to HTML templates 
inserting variables associated with more than one software 35 by system operators to provide specialized inputs and out- 
application, a single web page can access data from these puts as needed for different types of software applications, 
multiple software applications. The data is parsed into the These variables should be named in such a way that Internet/ 
HTML template by Internet/application gateway 332 and application gateway 332 can determine which software 
delivered to web server 222, which delivers the output to application to pass the variable information to or retrieve the 
web browser 212. Thus, by using templates with properly 4 q variable information from. Additionally, by adding a plural- 
defined variables, system operators can provide web based ity of variables to an HTML template, inputs to a plurality 
access to software application data without the difficultly of of different software applications may be made from the 
creating a completely new custom interface for every soft- submission of one template from web browser 212. 
ware application. Likewise, data can be retrieved from a plurality of software 

In a preferred embodiment, the library of HTML tem- 45 applications 342 and inserted into a single web page which 

plates include a wide variety of HTML pages that can be is output to web browser 212. 

used by systems developers to provide web browser inter- n,o« A vnrr/yr wr/MI . VTTOW 

action with a software application. To achieve this end, the DISCONNECT MECHANISM 

HTML templates preferably include various templates that Referring now to FIGS. 3 and 8, step 542 of FIG. 5 is 

employ different levels of HTML sophistication. For 50 performed by a disconnect mechanism. At this point in the 

example, some templates could use advanced HTML tags process, communication has already been established 

such as those specified only in HTML version 3.2. The use between client workstation 210 and software application 342 

of these advanced tags allows for sophisticated formatting through gateway 332. This generally involves authentication 

but requires an advanced web browser. Thus, HTML tem- of the user, if necessary, using the web server authentication 

plates containing these advanced tags can be used by sys- 55 and security measures explained above. Additionally, an 

terns developers that expect users to employ advanced web identifier has been created to identify this "conversation" or 

browsers to access the software application. Conversely, specific communication between the user and software 

HTML templates could also be provided that adhere to application 342. This identifier is called a conversation 

earlier HTML versions, such as HTML 2.0, and as such identifier and is attached to all information transmitted 

would be accessible by a wide variety of less sophisticated 60 between the user and software application 342 and is used to 

web browsers. By providing a wide range of templates, a tag the information as belonging to this specific communi- 

preferred embodiment gives system operators a wide flex- cation. This conversation identifier uniquely marks or tags 

ibility in providing web interfaces to software applications. all conversations between a specific web browser and soft- 

The HTML templates of a preferred embodiment include ware application 342. A conversation is generally corn- 
input variables that are used to pass data between web 65 menced by invoking an OPEN application program interface 
browser 212 and software application 342. In addition, (API), and is generally terminated by invoking a CLOSE 
substitution variables arc used to provide customized output API. Gateway 332 uses the conversation identifier to keep 
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track of individual requests because Gateway 332 may be 
servicing multiple users and multiple requests from each of 
those users. Gateway 332 thus maintains the information 
necessary to control the flow of data between the various 
users and software application 342. 

In general, once a user has accessed software application 
342, software application 342 will continue to process the 
user's request to completion or until further input is needed 
from the web client (step 819). For example, processing 
could be halted if software application 342 needs input from 
the user to select an appropriate database to locate additional 
data needed for further processing. At this point, software 
application 342 sends a request for input to the user through 
gateway 332 (step 821). Software application 342 then calls 
a DISCONNECT API on Internet/application gateway 332 
(step 821). The DISCONNECT API is a disconnect mecha- 
nism used to allow software application 342 to suspend a 
process while it waits for input. The DISCONNECT API 
causes gateway 332 to save the necessary data and state 
information corresponding to the suspended conversation, 
including the conversation identifier. The software applica- 
tion 342 then suspends the current software process and 
returns to a state that will allow the software process to be 
restarted later. 

Gateway 332 then communicates the request for input to 
the user through the web server application (step 823). The 
user will typically fulfill the request by entering the appro- 
priate data into an HTML field. When the web client user 
hits the submit button, the entered data is submitted back to 
software application 342 through the web server and gate- 
way 332. This response may come quickly or after a 
relatively long period of time has passed. In any case, 
gateway 332 identifies the web client sending the input data, 
and recognizes that the data is for a process of software 
application 342 that has been suspended. This is preferably 
done by matching the conversation identifier included with 
the input to a database of conversations indexed by their 
conversation identifiers. Gateway 332 then directs the soft- 
ware application to restart the suspended process corre- 
sponding to the conversation identifier (step 831). Software 
application 342 can then re-start the suspended process 
where it left off and receive the input data (step 833). At this 
point, the process either returns to step 819 for additional 
processing as before or terminates, as required. 

In a preferred embodiment, the step of calling the DIS- 
CONNECT API and suspending the software application 
342 process is done each time an input is requested from the 
web browser 212. This limits the amount of computer 
resources that are required for the processes to wait for the 
input to return. The DISCONNECT API is also preferably 
used anytime computer systems 220, 330 or 340 need to 
temporarily shutdown for maintenance. This can be used to 
ensure rehab ility without undue disruption in running soft- 
ware processes. 

Internet/application gateway 332 includes a plurality of 
APIs designed to facilitate the interaction between web 
browser 212 and software application 342. These APIs 
preferably include an OPEN API and a DISCONNECT API. 
In addition, the APIs can include SEND, RECEIVE and 
CLOSE API's. 

The OPEN API starts a set of interactions between the 
software application 342 and the web browser 212, In 
particular, when the OPEN API is called it generates a 
conversation identifier that is used to tag the conversation 
between software application 342 and web browser 212. A 
conversation may include a number of different processes to 
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accomplish a desired task. The conversation identifier is 
preferably included in all communications (i.e., communi- 
cations between software application 342 and Internet/ 
application gateway 332, between web browser 212 and web 

5 server 222) to identify what conversation each individual 
communication belongs to. 

The DISCONNECT API allows software application 342 
to suspend a running process until it is needed or able to 
restart the process. This is particularly useful where input is 

io needed from the web client user to complete an already 
running process of software application 342. When software 
application 342 requires such an input, a request must be 
sent back through web server 222 to web browser 212. For 
a variety of reasons it may be hours or even days before the 

15 input is sent back through web server 222 and to software 
application 342, if the input is ever sent at all. The DIS- 
CONNECT API allows software application 342 to suspend 
the process until the input is received. In particular, the 
software application sends notice that it will suspend the 

20 process (identified by its conversation identifier) to Internet/ 
application gateway 332 and calls the DISCONNECT API. 
The DISCONNECT API directs Internet/application gate- 
way 332 to save the required information to restart the 
process that is being suspended. Thus, when the input is 

25 finally received, Internet/application gateway 332 will rec- 
ognize that this input is for a suspended process (by using 
the associated conversation identifier) and will direct soft- 
ware application 342 to restart the suspended process and 
will deliver the input and required state information back to 

30 software application 342. 

Thus, the DISCONNECT API allows long delays 
between software application 342 and web browser 212 
communications that could otherwise result in unfinished 
software processes left waiting for action. The DISCON- 

35 NECT API receives the conversation identifier and saves the 
required information such that Internet/application gateway 
332 can restart the process when needed. 
The CLOSE API is issued when all interactions between 

40 software application 342 and web browser 212 are complete 
for a particular conversation. Software application 342 calls 
the CLOSE API which tags the conversation as complete 
and purges unnecessary files and data relating to the closed 
conversation. 

45 The SEND API is issued to send data (in the form of 
HTML pages or other types) to web browser 212. Software 
application 342 calls the SEND API which transmits a send 
request and sends the data through Internet/application gate- 
way 332 and web server 222 to the appropriate web browser 

50 212. The SEND API uses the conversation identifier to 
determine which web browser 212 needs the requested data. 

The RECEIVE API is issued to receive data from web 
browser 212. This can include STDIN data and environment 
data as needed. Software application 342 calls the 

55 RECEIVE API to direct Internet/application gateway 332 to 
wait for input. Once the input has arrived, Internet/ 
application gateway 332 uses the conversation identifier to 
match the input data to the appropriate conversation and 
passes the data to software application 342 for any required 

60 processing. Thus, Internet/application gateway 332 uses the 
OPEN, DISCONNECT, CLOSE, SEND and RECEIVE 
APIs to facilitate communication between software appli- 
cation 342 and web browser 212. 

65 WWW TRANSACTION SUPPORT MECHANISM 

Referring now to FIG. 4, for the purpose of illustrating 
WWW transaction support, a system 400 which allows 
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access to a specific software application over the WWW by clicking on a button presented on an HTML form, web 

from web browser 212 is shown. In this example, software server application 222 receives input data from web browser 

application 342 is a work flow application known as Flow- 212. This data stream may be presented to web server 

Mark which is programmed to perform a specific function. application 222 in many different formats, including RFC 

While this specific example uses FlowMark to describe the 5 1866 or RFC 1867 formats. These two specific formats are 

invention, the present invention is not limited to FlowMark. just examples of common data stream formats that common 

Other software applications may be used in conjunction with web browsers understand. The present invention is not 

the present invention and it is anticipated that additional limited to these formats but includes any data transmission 

application software packages will be so used. format now known or developed in the future. 

FlowMark is a popular process engineering tool that 10 If the user-requested information requires access to Flow- 
allows a relatively complex project or task to be broken Mark application 342, there will be a command embedded 
down into a series of smaller processes or tasks. The activity in the data stream that identifies the need to access CGI 420 
to be executed by FlowMark is described by using one or which will, in turn, provide access to FlowMark application 
more process models 440 that describe the process flow and 342. For this specific example, the command is a call to CGI 
activity. This makes FlowMark very useful for activities and 15 420. The call to CGI 420 may be part of the URL or, 
transactions that can be accomplished by computer systems alternatively, may be embedded in the data submitted by 
over communication networks. FlowMark is used to build web browser 212. Access to CGI 420 is protected to keep 
process models 440 which describe the real life task as a unauthorized users from accessing FlowMark application 
series of computerized sequences. Information is processed 342 via the WWW. In order to gain access to CGI 420, the 
by the FlowMark workflow software and usually involves 20 user must be authenticated by web server application 222. 
multiple related activities. The FlowMark workflow process The authentication mechanism discussed above with refer- 
language models the activity and automates transactions ence to FIG. 6 is the preferred authentication mechanism, 
where appropriate. Individual tasks are generated into "work When web server application 222 sees the CGI command in 
lists" (i.e., electronic "to do" lists). One example of using the data stream generated by web browser 212, it requests a 
FlowMark to accomplish a specific task will be presented in 25 password and user identification (userlD) from the user via 
detail below. web browser application 222. After the user has been 

System 400 of FIG. 4 represents one suitable detailed authenticated, web browser application 222 passes control to 

implementation of system 300 shown in FIG. 3. The same CGI 420 to perform the needed operations), 

computer systems are present (i.e., 210, 220, 330, and 340), CGIs are executable programs that are well known to 

with web browser 212 and web server application 222 30 those skilled in the art. CGIs function to provide a mecha- 

residing on client workstation 210 and web server computer nism for transmitting information across the WWW. CGI 

system 220, respectively. In addition, connection 326 of 420 passes information from web server application 222 to 

FIG. 3 encompasses connections 436 and 432 of FIG. 4. FMIG 430 in the form of commands. The commands are 

System 400 of FIG. 4 is presented herein to show one one-way, i.e., from CGI 420 to FMIG 430, but data and 

specific implementation of Internet/application gateway 332 35 status pass in both directions. Web server application 222 

when used to communicate with FlowMark workflow soft- invokes CGI 420, and sends the appropriate commands and 

ware application 342. data regarding the request. Although the current preferred 

For this specific implementation, Internet/application embodiment of the invention uses the "CGI Post" (stdin) 
gateway 332 includes a Common Gateway Interface (CGI) format for data transmission from web browser 212 to CGI 
420, a FlowMark/Internet Gateway (FMIG) 430 and WWW 40 420, any other data transmission formats that may be gen- 
Application Program Interfaces (APIs) 434. The four stan- erated by web browser 212 are contemplated and are within 
dard WWW APIs are Open, Close, Send, and Receive. the scope of this invention. In addition, it should be noted 
WWW APIs 434 provide a communication link between that the parsing and other operational functions of CGI 420 
FMIG 430 and activity program 432. FlowMark application may be implemented in other ways. For example, many web 
software 342 includes FlowMark 450, and one or more 45 server applications currently support "modules." Modules 
activity programs 432. FlowMark 450 includes a database are software routines implemented by using Dynamic 
438, one or more process models 440, and FlowMark APIs Linked Libraries (DLLs). Modules are capable of perform - 
436. A specific software application 342 is implemented in ing the same functions as CGI 420 in system 400 of FIG. 4 
system 400 by defining a process model 440 within and may replace CGI 420 in some preferred embodiments of 
FlowMark, and by defining activity programs 432 that 50 the present invention. The use of modules and DLLs is well 
perform specific tasks within process model 440. FlowMark known to those skilled in the art. Therefore, the use of CGI 
Application Program Interfaces (APIs) 436 are standard 420 is for purposes of illustration only and is not a limitation 
APIs that are supplied with FlowMark 450 and provide a of the present invention. 

way for activity programs 432 and FMIG 430 to commu- After receiving the data from web browser 212, CGI 420 

nicate with FlowMark 450. FlowMark database 438 is a 55 parses the data to locate relevant information about the 

general purpose database that may be used to store infor- requested processes, including the request for access to 

mation relating to any process model. For example, if a FlowMark 342. CGI 420 sends the user data and requests to 

process model 440 and activity programs 432 implement a FMIG 430 along with some control information. FMIG 430 

rental car work flow process, FlowMark database 438 would provides a way for FlowMark application 342 to interact 

be used to store information relating to the rental car eo with a web user over the WWW. FMIG 430 directs the flow 

process, such as which cars are available, etc. of information between CGI 420 and FlowMark application 

The user who needs to access a FlowMark application 342 342 and initiates FlowMark functions by using FlowMark 

over the WWW will input a request to web browser 212 APIs 436. For example, FMIG 430 may invoke a FlowMark 

using client workstation 210. The user can enter a URL for API 436 to create a process instance necessary to process the 

a specific home page site or click on a button presented in 65 request submitted by the user. Then, using a different Flow- 

an HTML-generated user interface using web browser 212. Mark API 436, FMIG 430 can invoke or start this process 

When the user "submits" the requested information, usually instance. The process is governed by a process model 440, 
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which tells FlowMark 450 which activity program 432 must accomplish. Multiple users from multiple locations can 

be invoked to perform the desired task. Once FMIG 430 has access FlowMark via the WWW and be assured that the 

started a FlowMark process, it waits until it receives infor- FlowMark interface will remain stable. In some cases, the 

mation from FlowMark 450 via FlowMark APIs 436 or from system will present a transparent web client, which means 

activity programs 432 via WWW APIs 434 that the request 5 that there will be no indication to the user that their request 

has been processed. The command interface between FMIG ^ being processed by FlowMark application 342. 

430 and FlowMark APIs 436 is one-way, i.e., FMIG 430 It . . w . ~ fjl A t - ™ mQ „ 

, . , ™ w . An . , t , ' , , „_ It should be noted that Web Server Application 222 may 

always invokes FlowMark APIs 436, but the data and status . , 4 , ... . „ . j, v ' 

. c J „ i . , • ' r^. . . be co-located with Web Browser 212. In addition, while not 

information flows in both directions. This is important . , r> t 0t , ^ . 0 * 

. „ . . - . ™ w . required, Computer System 330 and Computer System 340 

because it allows the interface to FlowMark application 342 m .u * . r j 1 j- 

. , . , . KF ' , 30 are the same computer system in a preferred embodiment, 

to remain unchanged even if the web interface is chanced. n . „ i_ ■ c L 

_ ° . b Fmally, the connections shown in the figures may be any 

FMIG 430 will also assign a conversation identifier to the t of h ^ m ! ical means of ^^wg mm r, ulel 

requeste from each web client that require interaction with s tems ^ , he ^ ^ j^,^ bu , ^ no , limi , ed 

FlowMark. As explained . above, the conversation identifier direc , conneclionSj Inlernet connec tions, Intranet 

uniquely marks or tags al conversabons between a specific 15 conaectionS) InfalBd (IR) and other forms of wireless 

web browser and FlowMark. A conversation is generally connections . It j, ant i cipa ted that many alternative methods 

commenced by invoking an OPEN application program and materia] for connecting computer systerns ^ te 

«n genC J terminated . by mvotang a readily adapted for ^ ^ me , invention . In sum> 

CLOSE API FMIG 430 uses the wnversation identifier to while ^ ate systems are disclosed 

keep track of individual requests because FMIG 430 may be 20 herein ( mQS 3 and 4)> a com ter tem in accordance 

semcing multiple users and multiple requeste from each of with the , invemioD ma mdude number Qr 

those users. FMIG 430 thus maintains the information combination of computer systems. The figures herein are 

necessary to control the flow of information between the shown to mustrate saliem te of , he inventi and 

various users and the process mstances being processed by should not ^ construed to umit the mvention t0 me par- 

25 ucu i ar configurations illustrated herein. 

Activity programs 432 are software modules which can be 
used by FlowMark to accomplish the tasks requested by the MULTIPLE USER ACCESS TO MULTIPLE 
user. Individual activity programs 432 are initiated by Flow- SOFTWARE APPLICATIONS VIA A COMMON 
Mark and then the Activity Program 432 communicates with USER INTERFACE 
the web client via WWW APIs 434. Each workflow process 30 Referring now to FIGS. 2 and 10, further advantages of 
model 440 initiates the activity programs 432 necessary to the present invention become most apparent when multiple 
accomplish the designated task. Each activity program 432 users access multiple software applications simultaneously 
is an instance of a program that runs to accomplish the via web browsers 212 on the WWW. Bach web user will 
desired task, returns the requested information, and then generally have a client workstation 210 that will be used to 
terminates. For example, activity programs 432 may require 35 access the WWW. For the specific configuration of FIG. 10, 
information from the user in order to process the user's client workstations 1 and 2 (CW1 and CW2) are coupled to 
request. Activity program 432 invokes appropriate WWW web server 1 (WS1), and client workstation 3 is coupled to 
APIs 434 to obtain the necessary data. In this case, FMIG web server 2 (WS2). Client workstations CW4 and CW5 are 
430 has data waiting to submit to activity program 432, coupled to web server 3 (WS3). Both web servers WS1 and 
which is the same data that CGI 420 sent earlier in the 40 WS2 are coupled to a gateway computer system (GCS), in 
process. Activity program 432 invokes WWW API 434 to this case, GCS1. As shown, WS3 is coupled to GCS2. GCS1 
send a request for the data to FMIG 430 and FMIG 430 and GCS2 are both coupled to a software application corn- 
returns this data to activity program 432 in response to the puter 1 (SAC1). In addition, GCS2 is also coupled to a 
request from WWW API 434. Activity program 432 takes software application computer 2 (SAC2). Both SAC1 and 
the appropriate steps to process the data and fill the request. 45 SAC2 are running various software applications that web 
Activity programs 432 communicate with the user through users might need to access via the WWW. 
WWW APIs 434, FMIG 430, CGI 420, web server appli- The present invention provides a common graphical user 
cation 222, and web browser 212. Activity programs 432 interface for each web client and manages all the accesses by 
will also receive a return code from WWW API 434 to verify all these client workstations (CW1-CW5) to the application 
that the user has received the requested data. After confir- 50 software programs running on SAC1 and SAC2 in a manner 
mation has been received, that specific instance of activity that assures that the requested functions are performed as 
programs 432 is finished with that request and will termi- requested. The GCS provides the application gateway that 
nate. Other instances of one or more activity programs 432 directs traffic between the web clients and the software 
may still be active, processing other requests. application. The security mechanism of the present inven- 

WWW APIs 434 serve to provide interaction between 55 tion works with the application software and requires use- 

FMIG 430 and activity programs 432. WWW APIs 434 rIDs and keys which are used to access authentication data 

allow FlowMark activity programs 432 to send and receive for each of the various computer resources. By assigning 

data and status to and from web clients. It is important to unique identifiers to each conversation, the GCS can interact 

note the FlowMark APIs 436 remain unchanged. This is with each software application running on SACS using its 

important because FlowMark APIs are not modified to allow 60 native interface, and can then identify output from the 

a web user to access FlowMark. In this sense, FlowMark is software application and match it with the web client that 

unaware that a web client is accessing it, and FlowMark requested the output. By using HTML templates and vari- 

operates in the same manner it would as if a dedicated ables in accordance with the present invention, some web 

application were performing the requested functions. Since clients may actually be accessing information from more 

the FlowMark APIs are not affected, the operation of Flow- 65 than one software application on different computer systems 

Mark will remain stable regardless of the process or task the and may receive the requested data in a single web page. At 

web client is requesting that FlowMark application 342 any time, one of the web clients may suspend processing and 
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cease providing input to a software application. By using the 
DISCONNECT API feature of the present invention, no 
computer time will be wasted uneccessarily. 

CAR RENTAL EXAMPLE 

A specific example of a preferred embodiment of the 
present invention can be described in greater detail by using 
the situation where a person wants to rent a car by accessing 
FlowMark application software for a rental car agency over 
the WWW. Referring now to FIG. 23, a process model 2000 
for the overall car rental example includes process steps 
2010, 2020, 2030, 2040, and 2050. In process step 2010 of 
process model 2000, an activity program receives car rental 
information, locates the next reservation number, saves the 
reservation number to a file, returns the reservation number 
to the requester and sets the reservation number in the 
FlowMark output data container. Process step 2010 uses 
FlowMark Internet Connection WWW APIs and data con- 
tainer APIs. Process step 2020 is an activity program which 
determines if a car is available to fill the reservation. The 
subsequent path taken in Process Model 2000 is dependant 
upon the results of this determination. If a car is available to 
fill the reservation, then the next step in process model 2000 
would be process step 2030. If, however, no car is available 
to fill the reservation request, the next step in the process 
model would be process step 2040. In process step 2030, an 
available car, which matches the car rental request, is 
identified and scheduled to fill the reservation request. In 
addition, the reservation confirmation number is generated 
and transferred to the requester. In process step 2040, the car 
rental agent has the option of deciding whether or not to try 
and find a rental car from another location to fill the 
reservation request. If the availability of a rental car at an 
alternative location is sought, then the next step in process 
model 2000 would be process step 2050. In process step 
2050, an activity program is available for scheduling and 
moving a car from one location to another location to fill the 
reservation request. Process step 2050 presents a list of cars 
that are available at alternate locations so that the car rental 
agent can select an appropriate car to be moved. Each of 
these steps is described in greater detail below. 

Referring now to FIG. 4 and FIG. 23, the person or user 
who wants to rent a car will access the WWW by using client 
workstation 210 which is running web browser 212. The 
user will enter the URL for the rental car agency and locate 
the home page site for the rental car agency using web 
browser 212. Then, the user will locate the appropriate area 
or page on the rental car agency's web site which has been 
previously set up to accept requests for renting cars. We 
assume for this example that there is a rental reservation 
form on the rental car agency's web site. After locating the 
car rental reservation form, the user will enter the informa- 
tion required by the car rental agency. This information 
would typically include items such as a customer identifi- 
cation number, password, the city where the car is to be 
rented, desired dates for renting the rental car, the specific 
type of car to be rented (i.e., make, model, and size), etc. 

One example of the HTML that would generate a suitable 
rental reservation form or template is shown in FIG. 11. 
Assume that web server 222 receives an input from web 
browser 212 specifying the HTML template of FIG. U as 
the next output that needs to be sent back to the web browser 
212. This specifying can be done in various ways, including 
the use of form inputs from the web browser 212. This form 
requires a user to input his or her member number, last name, 
first name, middle initial, origin city, state, start date, number 
of days, and car preference. Once the user has input this 
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information, the user submits his or her information by 
clicking on a "submit" button on the rental reservation form. 
At this point, web server application 222 receives the data 
stream generated by the user request from web browser 212. 

5 One suitable format picks out all variables and other relevant 
information data and sends it to web server application 222 
in a post data stream format, which would look like the data 
stream of FIG. 12. As explained above, this data stream may 
be presented to web server application 222 in many different 

1Q data formats and the present invention is not limited to any 
specific data format. These activities are encompassed in 
process step 2010 of FIG. 23. 

Web server application 222 examines the data stream 
from web browser 212 to determine what action should be 

15 taken to fulfill the user's request. In this specific example, a 
call to CGI 420 from the line in the HTML form that reads 
"<FORM ACTION-"/cgi-prot/exmp5cgi.exe" METHOD- 
"POST"> tells web server application 222 that it needs to 
call the protected CGI called exmp5cgi.exe, which we 

2 q assume is CGI 420. When web server application 222 sees 
this call to a protected CGI, it knows that authentication is 
required before web server application 222 grants access to 
CGI 420. 

Because CGI 420 is protected, access to CGI 420 must be 

25 controlled to avoid unauthorized users from accessing Flow- 
Mark application 342 via the WWW. In response to the 
parameters in the HTML form that specify CGI 420, web 
server application 222 must authenticate the web user. This 
authentication requires the user to enter a userlD and pass- 

30 word and web server application 222 issues a REALM 
request to web browser 212. A REALM request is a well- 
known software security feature which requires the user to 
input a userlD and password in order to gain access to CGI 
420. Web browser 212 stores the userlD and password 

35 received from the user, and sends this information to web 
server application 222. Web server application 222 uses the 
userlD and password to authenticate the user before granting 
the user access to CGI 420. It should be noted that some 
future implementations of web browser 212 will most likely 

40 provide a mechanism for web browser 212 to insert some 
form of the authentication data into the data stream trans- 
mitted to web server application 222. All methods and 
techniques for gathering authentication data and transmit- 
ting it from web browser 212 to web server application 222 

45 are within the scope of the present invention. 

Once authenticated, web server application 222 passes 
control to CGI 420, which receives data from web browser 
212. For this specific example, CGI 420 receives the data 
stream in "post" format via a standard input protocol "stdin". 

50 The post format is a data format description well known to 
those skilled in the art. Stdin is a file descriptor that reads 
post data. Although a current preferred embodiment of the 
invention uses the post data format description, any other 
data formats that may be used by web browser 212 and web 

55 server application 222 are contemplated and arc within the 
scope of this invention. The post data for the rental reser- 
vation form that is transmitted from web browser 212 to CGI 
420 for this example is shown in FIG. 12 
Once CGI 420 receives the post data from web browser 

60 212, it parses the data, and looks for workflow variables. In 
our example, workflow variables have a wf- prefix. The two 
hidden workflow variables are "wf-cgi-submit=2" and "wf- 
cgi-html=exm/smp/exmp5srk.htmr. The first of these, "wf- 
cgj-submit=2", tells CGI 420 that it needs to create and start 

65 a FlowMark process instance. The two non-hidden work- 
flow variables arc "wf-fmig-key" and "wf-api-proc- 
template«"WWW.ReservationRequest". These variables 
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indicate which process template should be created and To assure that FMIG 430 can match up the process instance 

started. Multiple variables in a single HTML template can be with the web browser that requested it, FMIG 430 generates 

used to retrieve data from multiple applications. For and stores a "handle" for this web client. Depending on the 

example, an HTML template could be specified that includes process, the handle is some combination of the process 

three variables. One variable could specify a particular 5 instance name, the activity instance name, and the security 

FlowMark process that is to be started while the other two data for the web client. This handle is a unique identifier for 

variables are used to retrieve information from different the web client. FMIG 430 then enters the handle, process 

software applications that are accessible by a FlowMark instance, userlD, etc. into its internal data cache. FMIG 430 

activity program. Upon submission of the HTML template then waits for a WWW API 334 to connect. At this point, 

to web server 222, the CGI parses the variables and delivers 30 CGI 420 is still connected to FMIG 430 via connection 316 

them to the FMIG. The FMIG then directs the software and is waiting to receive the requested status or data from 

application to start the process specified by the wf variable FMIG 430 to fill the user's car rental request, 

and passes the two application variables to the appropriate When the car rental reservation process model was ini- 

software application. The software application would then tially built, the first activity program 432 was identified and 

retrieve the appropriate data from the applications corre- 35 designated to run automatically whenever the FlowMark car 

sponding to the variables. Thus, by using the appropriate rental reservation process model was invoked. This means 

HTML variables a web client is able to work with many that whenever FMIG 430 creates and starts a FlowMark 

different applications through a single web page. This inter- instance of the car rental reservation process model, the first 

action can be completely transparent to the web client or car rental reservation FlowMark activity program 342 will 

may be apparent from the interface web page. 20 be automatically started by FlowMark application 342 In 

Thus, by using HTML templates with substitution this specific example, there will be multiple related activity 

variables, a single relatively simple CGI module in conjunc- programs 432 that will work together to process the car 

tion with an FMIG can provide an effective interface rental request. The FlowMark workflow process language 

between a web server and a plurality of software applica- models the car rental request and reservation process and 

tions. This allows system operators to provide easily cus- 2 s automates transactions where appropriate. To process the car 

tomizable web access to a plurality of software applications rental request, FlowMark application 342 will create an 

over the WWW without having to use multiple or exces- instance of the car rental reservation process model in 

sively complex CGI modules. CGI 420 then sends the post FlowMark database 438 and then check to see if the Program 

data and the environment data to FMIG 430 along with other Execution Client (PEC) is active. The PEC is a supervisory 

control information. Environment data is available through 30 program module that coordinates the operation and flow of 

standard programming techniques which are well known to activities in FlowMark application 342. Once the PEC is 

those skilled in the art and can be passed to CGI 420 as a active, FlowMark application 342 dispatches the activity to 

standard "C" programming language parameter. the PEC, and updates FlowMark database 438 to indicate 

FMIG 430 directs the flow of information between CGI that the activity is running. Then, the PEC starts the activity 

420 and FlowMark application 342 by using FlowMark 35 program 432 which has been registered to the first activity 

APIs 436 to communicate requests from CGI 420. These in the process. The selected activity program 432 then 

FlowMark APIs are standard APIs that ship with the Flow- begins to run. The number and nature of activity programs 

Mark product, and need not be changed to accommodate the 432 necessary to process the web client's car rental request 

present invention. This is important because it allows the will depend on how the process model 440 was designed, 

native command interface to FlowMark application 342 to 40 For example, some process models 440 may model an 

remain unchanged even though a new web interface is being activity as a completely automatic process which runs to 

provided. Note that the command interface between FMIG completion without any human intervention. Alternatively, a 

430 and FlowMark application 342 is one-way, i.e., FMIG process model 440 may require extensive human input and 

430 always invokes FlowMark APIs 436, but data and status intervention before it finishes the model process. Regardless 

information flows in both directions. 45 of design, each workflow process model 440 initiates the 

After receiving the data from CGI 420, FMIG 430 parses specific activity program 432 necessary to accomplish the 

the data and locates the userlD and key from the wf-fmig- designated task or tasks specified to completed the modeled 

key variable to determine whether there is a corresponding process or procedure. 

FlowMark userlD and other FlowMark access information Each individual activity program 432 is a separate soft- 

that provides the user access to FlowMark application 342. 50 ware module that is designed to accomplish a specific task 

Assuming the userlD and key has corresponding FlowMark or return some requested information, and then terminate, 

access information, FMIG 430 then logs into FlowMark WWW APIs 434 allow FlowMark activity programs 432 to 

application 342 using this access information. FMIG 430 send and receive data and status to and from web clients via 

invokes one of FlowMark APIs 436 to create a process the WWW. WWW APIs 434 are always invoked by activity 

instance necessary to process the request submitted by the 55 program 432, but data and status information flows in both 

user. In this example, the request would create a process directions between FMIG 430 and activity programs 432. 

instance called "www_Rese^vation__Request. ,, This pro- In order to process the rental car request of this example, 

cess instance has been specifically designed to handle multiple related activity programs 432 may be invoked to 

WWW car rental transactions. Then, using a different Flow- complete the workflow process specified in process model 

Mark API 436, FMIG 430 invokes or starts this process 60 440. For example, one activity program may be initiated to 

instance. FMIG 430 also saves the appropriate HTML query FlowMark database 438 to determine if the person 

variable information for the "wf-cgi-html" variable, which requesting the rental car is an existing customer of the car 

tells FMIG 430 which HTML to render after the workflow rental agency. If they are, then the customer identification 

sequence has ended. The prefix to the FlowMark process number will match an existing account number in FlowMark 

www_Reservation_Request tells FMIG 430 that this pro- 65 database 438 and activity program 432 can proceed and 

cess is web-enabled, meaning that an activity program 432 process the car rental request. If, however, the person 

will use WWW APIs 434 to communicate with FMIG 430. requesting the rental car is not an existing customer, a 
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different activity program 432 may be initiated to commu- 
nicate with the web client, gather the necessary information, 
and enter the web client's customer information into Flow- 
Mark database 438. 

Next, once a valid customer identity has been established, 
another activity program 432 may be initiated which will 
determine if the request can be filled according to the 
customer's request. This would be encompassed in process 
step 2020 of FIG. 23. For example, is a car available on the 
requested date, in the requested city, in the requested size, 
etc.? Alternatively, the FlowMark process model may 
specify that the car rental request should be routed to a 
human agent for further processing. In that case, the car 
rental request would show up on a FlowMark task list for the 
agent. Alternatively, the entire process may be completely 
automated. In either case, the car rental agent or activity 
program 432 processes the web client's car rental request 
and if the desired car is available, FlowMark database 438 
will be updated to indicate that the car has been "reserved." 
These activities would be accomplished in process step 2030 
of FIG. 23. If, however, the desired car is not available, a 
new activity program 432 may be initiated to look for a car 
in an alternate location (process step 2040 of FIG. 23) and 
create a request from a human car rental agent to transfer the 
desired automobile from another location to the desired 
location (process step 2050 of FIG. 23). Some of these 
activity programs 432 are described in greater detail below. 

In this example, once the car rental agent has approved the 
request and transferred the vehicle to the desired location, 
the car rental agent will provide an input to FlowMark 
application 342 and update the activity program 432. Once 
the rental car has been reserved in the system, a different 
activity program 432 may be initiated to generate a confir- 
mation number for the customer and process the confirma- 
tion transaction with the customer. Each activity program 
432 is designed to be an independent process which executes 
to conclusion and then quits. 

At this point, activity program 432 uses FlowMark APIs 
436 to retrieve any input data from the FlowMark input data 
container. The FlowMark data container is a FlowMark 
function that is defined when a FlowMark process model 
440 is built. The FlowMark data container is accessible via 
FlowMark APIs 436 and is used as a storage location to store 
and pass status and information from one activity program 
432 to the next activity program 432 in process model 440. 
Then, activity program 432 opens a conversation with the 
web client by issuing an Open to WWW API 434 via 
connection 428. Activity program 432 also includes infor- 
mation such as the process instance being executed, activity 
name, and FlowMark userlD. This information is transmit- 
ted to FMIG 430 by WWW API 434. FMIG 430 matches the 
Open API with the appropriate web client by locating the 
requested process instance name in the internal data cache. 
FMIG 430 then generates a "conversation identifier" for this 
transaction. FMIG 430 saves the conversation identifier in 
its internal cache and transmits the conversation identifier to 
WWW API 434 as part of a response message. WWW API 
434 detaches from FMIG 430 and returns the conversation 
identifier to activity program 432. From this point on, the 
conversation identifier is included on all WWW API 434 
submissions between this web client and all activity pro- 
grams 432 necessary to process the web client's request. The 
conversation identifier remains valid until the conversation 
is terminated by a Close API issued by activity program 432. 

After receiving the conversation identifier from FMIG 
430, activity program 432 then issues a Receive to WWW 
API 434. The Receive API is a request to FMIG 430 to 
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obtain data from the web client. In this case, FMIG 430 has 
data from the web client waiting to submit to activity 
program 432. This is the same web client data that CGI 420 
sent to FMIG 430 earlier in the process. FMIG 430 sends the 

5 post data and environment data to the Receive WWW API 
434, which relays the data to activity program 432. Activity 
program 432 takes the appropriate steps to process the data 
and fill the request. 
At this point in the process, activity program 432 will also 

10 issue a Send to WWW API 434 that sends a reservation 
confirmation HTML screen to the web client at client 
workstation 210. The Send API generates a send request to 
FMIG 430 and sends the HTML data necessary to render the 
reservation confirmation screen. FMIG 430 matches the 

15 included conversation identifier with the web client handle 
(which are stored together in the internal data cache) and 
transmits the HTML data from activity program 432 along 
with the data type and the handle to CGI 420 which is still 
attached to FMIG 430 awaiting input. Activity programs 432 

20 will generate the data type "HTML template" so that CGI 
420 will be able to parse the original HTML template and 
replace the appropriate HTML substitution variables with 
the HTML data transmitted by activity programs 432. 
Alternatively, activity program 432 could transmit MIME, 

2 5 URL or HTML template data to CGI 420. At this point, CGI 
420 detaches from FMIG 430 and starts processing the 
received data. FMIG 430 then responds to the WWW APIs 
434 with an OK return code in a response message. WWW 
APIs 434 also detach from FMIG 430 and generate a return 

30 code to activity programs 432. In general, WWW APIs 434 
detach from FMIG 430 after each WWW API 434 is 
invoked. 

An example of the HTML code for the reservation con- 
firmation template is shown in FIG. 13. Note that variable 

35 wf-act-outmsg is a substitution variable that will be replaced 
by the confirmation number in the HTML screen displayed 
by web browser 212. The HTML code after CGI 420 
processes the data received from FMIG 430 is shown in FIG. 
14. The HTML code shown in FIG. 14 is the code that web 

40 server application 222 will render and that web browser 212 
displays on client workstation 210. Note that the HTML 
code in FIG. 14 contains the customer's reservation number. 
This time, since CGI 420 and the web client have already 
established a conversation, and since CGI 420 is still active 

45 from the first time it was invoked, there is no need to 
authenticate the web client. CGI 420 inserts the hidden 
variable, "wf-fmig-handle" along with the confirmation 
number and also inserts the wf-fmig-key from the first 
HTML screen into the HTML code, which allows subse- 

50 quent HTML pages to contain embedded data that authorizes 
the page to access FlowMark 450. The substitution of 
HTML variables demonstrated in this example can be 
extended to include substitution/replication of JAVAScript 
variables and parsing/inserting JAVAScript templates. The 

55 present invention is not limited to HTML variable substitu- 
tion. 

During the processing of the reservation confirmation 
template, activity program 432 has issued a Receive API to 
WWW APIs 434 which acts as a confirmation message for 

60 activity program 432 to ensure that the customer has 
received and viewed the confirmation number. The web 
client then clicks on the "submit" button when they have 
received and recorded their confirmation number. This data 
is transmitted, as before to web server application 222 along 

65 with the web userlD and password which have been retained 
by web browser 212. Web server application 222 uses this 
information to once again authenticate the web client to CGI 
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420. Web server application 222 invokes CGI 420 with the 
same HTML code as before; <FORM AdlON="/cgi-prot/ 
exmp5cgi.exe" METHOD="POST">. CGI 420 receives the 
post data from web browser 212. In this example, web 
browser 212 would format the data as "form-urlencoded 
media type," The data would appear similar to that shown in 
FIG. 15. The wf-cgi-submit value of 13 is a command to 
pass the data to an activity program. FMIG 430 retrieves the 
wf-fmig-key and checks the key from the post data and web 
userlD from the environment data to ensure that the web 
client is authorized. FMIG 430 matches the wf-fmig-handle 
with a conversation identifier from the internal data cache 
and checks to see if WWW API 434 has connected. If WWW 
API 434 has not yet connected, FMIG 430 will simply wait. 
CGI 420 remains connected to FMIG 430, waiting for a 
response. Once the Receive WWW API 434 has connected 
to FMIG 430, FMIG 430 uses the conversation identifier to 
match the Receive API to the appropriate web client and 
transmits the post data and environment data to WWW API 
434 which, in turn passes this data to activity program 432. 
Activity program 432 processes the data and closes the 
conversation using the Close WWW API. The Close API is 
sent to FMIG 430 along with the conversation identifier, 
process instance name, and other pertinent data. FMIG 430 
processes the close request and sends a response message to 
WWW APIs 434, which generate a return code to activity 
programs 432 to verify that the conversation has ended. 

FMIG 430 then retrieves the stored variable values from 
the internal data cache and transmits the data to CGI 420. 
CGI 420 receives the data and variables and detaches from 
FMIG 430. CGI 420 then contacts web server application 
222 and transmits the variables and data and directs the web 
server application to render the specified HTML to web 
browser 212. 

At this point, interaction with the user regarding the car 
rental request has been completed. However, there are other 
activity programs 432 mentioned above which may have 
been completed in the interim. In addition, other processes 
may need to be completed and other activity programs 432 
may be activated to accomplish these processes. In this 
example, one activity program 432 has been interacting with 
the user and has transmitted the data gathered from the user 
to the FlowMark data container. The data in the FlowMark 
data container is now the input for another activity program 
432 in FlowMark process model 440. Some of the other 
activity programs 432 are described below. 

Once any activity program 432 has finished operation, 
control passes back to the PEC. The PEC returns to Flow- 
Mark and FlowMark database 438 is updated to indicate one 
activity program 432 is completed and that the next activity 
program 432 to complete the process can be initiated. If the 
next activity program 432 is an automatically executing 
activity program 432, FlowMark 432 will create an instance 
of the activity in FlowMark database 438, check to see if the 
PEC is active, dispatch the activity to the PEC, and update 
FlowMark database 438 to indicate that the activity is 
running. The PEC starts the activity which has been regis- 
tered as the next activity to run and the appropriate activity 
program 432 will run to completion. 

As noted above, some of the activities required to process 
the car rental request may be modeled so as to require human 
interaction or intervention. For example, if necessary, a 
human car rental agent may be required to verify the 
reservation request for a car. Alternatively, it may be that the 
requested rental car is not available at the requested location 
and a human agent may be contacted to relocate an appro- 
priate car from an alternative location. There arc two pos- 



)2,905 

30 

sible outcomes of the web client's request for a car, either 
the car rental agency has the requested car available in the 
destination city on the requested dates or it does not. After 
a query to the FlowMark database has checked the 

5 availability, the correct activity program will be initiated. 
In this example, the activity program 432 would generate 
an item for a FlowMark user's work list and the FlowMark 
user, in this case the car rental agent, will have to start the 
activity manually. The car rental agent would use web 

10 browser 212 to access their FlowMark runtime client web 
page. The HTML code necessary to generate an appropriate 
web page for the car rental agent would be similar to the 
code shown in FIG. 16. The car rental agent enters their key, 
selects "Work with Work Items" and clicks on the submit 

15 button. This radio button is associated with a specific HTML 
template, exmp5ewi.htm, because of the line of HTML in 
FIG. 16 that reads <INPUT TYPE="radio"NAME«"wf-cgi- 
html"VALUEo"/exm/html/exmp5ewi.htm" CHECKED>. 
Once again, as previously described, web server applica- 

20 tion 222 receives the post data stream generated from web 
browser 212. Since CGI 420 is protected, another REALM 
request must be issued and answered. As before, the 
REALM request requires the car rental agent to input a 
password and userlD. It should be noted that some future 

25 implementations of web browser 212 will most likely pro- 
vide a mechanism for web browser 212 to insert some form 
of the authentication data into the data stream transmitted to 
web server application 222. All methods and techniques for 
gathering authentication data and transmitting it from web 

30 browser 212 to web server application 222 are within the 
scope of the present invention. In general, each web runtime 
client should know their userlD and password on the web. 
In either case, web browser 212 will store the web userlD 
and the password and send the information to web server 

35 application 222. As before, web server application 222 uses 
the web userlD and the password to authenticate the web 
client and gain access to CGI 420. After the car rental agent 
has been authenticated, CGI 420 is invoked through the 
following HTML language from the example 

40 above:<FORM ACTI O N«'7cgi-pro t/ 

cxmp5cgi.exe"METHODo"POST">. CGI 420 receives the 
post data stream from web server application 222 via stdin. 
The data stream will typically look like the example shown 
in FIG.14. 

45 Because the submit value in the data stream is 0, CGI 420 
will retrieve the specified template (exmp5ewi.htm), parse 
the template for HTML variables, and pass the parsed 
variables together with the environment data and control 
information to FMIG 430. An example of the HTML code 

50 used to generate the template before CGI 420 begins pro- 
cessing would look similar to FIGS. 18a and 18b. 

FMIG 430 retrieves the car rental agent's key value 
(webfmagent) and web userlD from the data stream and uses 
that information to find a FlowMark userlD in FlowMark 

55 database 438 that the car rental agent is authorized to use. 
Since the car rental agent is not already logged into Flow- 
Mark 450, FMIG 430 logs into FlowMark 450 using the 
correlating FlowMark information in the FlowMark data- 
base 438. FMIG 430 uses FlowMark APIs 436 to retrieve the 

60 information associated with the car rental request that was 
input earlier by the user (i.e., wf-api-item-id, wf-api-item- 
descrip, wf-api-item-state, etc.) and formats the data into a 
message for CGI 420 which is still connected and waiting 
for data from FMIG 430. The data is passed through FMIG 

65 430 to CGI 420. Once the data has been transmitted to CGI 
420, CGI 420 disconnects from FMIG 430 and begins to 
process the received data. CGI 420 will take the information 
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from FMIG 430 and process the variables, putting the a conversation identifier and stores the identifier in its 

information into the appropriate template that will be dis- internal cache. FMIG 430 transmits the conversation iden- 

played on client workstation 210. An example of the HTML tifier to WWW APIs 434 in a response message and the 

code after CGI 420 has completed processing the template WWW APIs 434 detach from FMIG 430 and return the 

is shown in FIGS. 19a, 19b and 19c. The HTML code shown 5 conversation identifier to activity program 432. From this 

in FIGS. 19a, 19b, and 19c is used to render an output screen point on, the conversation identifier is included in all WWW 

of work items on the work list for the car rental agent on API 434 submissions dealing with this web client and this 

client workstation 210. The car rental agent will view the list process instance. The conversation identifier remains valid 

of work items generated by FlowMark 450 and displayed by until the conversation is closed. Activity program 432 issues 

web browser 212. The car rental agent will select one of the 10 a Send API to WWW APIs 434 to generate an HTML screen 

displayed work items and click on the "start work item" to the web client. Activity program 432 specifies the data 

button and then on the "perform action" button. These type as HTML template so that CGI 420 knows to parse the 

actions by the car rental agent will generate a data stream to template and replace the variables with the data sent by 

web server application 222 that includes the web userlD and activity program 432. Activity programs 432 specify the 

password information. The web userlD and password have 15 location of the template and the text to be substituted for 

been retained by web server application 222 and the car each variable. 

rental agent need not re-enter this information. Web server The Send API generates a send request to FMIG 430 and 

application 222 uses the stored userlD and the password to sends the data. FMIG 430 matches the included conversa- 

authenticate the car rental agent and gain access to CGI 420. tion identifier with the appropriate web client and transmits 

Web server application 222 invokes CGI 420 with HTML 20 the data from the activity program 432, the data type and the 

code similar to that used before; <FORM ACTION="/cgi- handle to the still-attached CGI 420. At this point, CGI 420 

prot/exmp5cgi.exe"METHOD="POST"> and CGI 420 detaches from FMIG 430 and starts to process the received 

receives the post data from web browser 212. The post data data. FMIG 430 responds to the WWW API 434 and WWW 

will be received by CGI 420 via stdin and will be similar to API 434 also detaches from FMIG 430. WWW APIs 434 

that shown in FIG. 20. 25 send a return code to activity program 432. CGI 420 will use 

In this case, since the car rental agent has submitted a the data transmitted from FMIG 430 to create a screen 

request to start a work item, the value of the submit variable containing information about cars that are available to fill 

is equal to 3. CGI 420 will retrieve the specified template (in the customer's request. In addition, since CGI 420 is in 

this case exmp5ewi.htm), parse the template for HTML communication with web server application 222, CGI 420 

variables, and pass these variables along with the data 30 will insert a hidden variable, the "wf-fmig -handle", and the 

stream, environment data and control information to FMIG wf-fmig key from the first HTML screen into the HTML 

430. While control passes to FMIG 430 at this point, CGI code for the new screen. CGI 420 then parses the template 

420 remains connected to FMIG 430 and waits for data to be and processes the "wf-" variables, filling information into 

returned from FMIG 430. FMIG 430 authenticates the car the appropriate locations. The HTML code in the template 

rental agent using the variables transmitted by CGI 420. 35 file would look similar to the HTML code shown in FIG. 21. 

Since the car rental agent is already logged onto FlowMark After CGI 420 finishes processing, the HTML code in the 

450, FMIG 430 need not log the car rental agent on again. file would look like the HTML code in FIG. 22. This is the 

FMIG 430 parses the data stream; sees the request to start a HTML code that web server application 222 will use to 

work item, (wf-api-item) and issues a FlowMark API 436 to render the car rental agent's screen on client workstation 

start the processing the work item. Since the work item has 40 210. In the meantime, activity program 432 has issued a 

been transmitted in a WWW context with HTML variables, Receive WWW API 434 to receive the data from the web 

FMIG 430 knows the activity program will use WWW APIS client. The car rental agent selects which car to reserve in 

434 to have a conversation with the web client. FMIG 430 order to fill this car rental request and clicks on the "submit 

will generate a handle for this web client and will enter the process" button. The communication process between web 

handle, process instance name, activity name, userlD, etc. 45 browser 212, web server application 222, CGI 420, FMIG 

into the internal cache. FMIG 430 also saves the HTML 430 and FlowMark 450 takes place as explained above, 

variable information so that it can be restored later when the Eventually, the selected car will be updated in FlowMark 

conversation has taken place. FMIG 430 will then wait for database 438 and the conversation will be terminated. Since 

WWW APIs 434 to connect. the car rental reservation process instance is now complete, 

In response to the FlowMark API 436 that starts the 50 FlowMark 450 removes the process instance from Flow- 
requested work item (wf-api-item), FlowMark will create an Mark database 438. 

instance of the activity in FlowMark database 438, check to A similar sequence of events would transpire for the 

see if the PEC is active, dispatch the activity to the PEC, and situation where no rental car is available at the requested 

update FlowMark database 438 to indicate that the activity location. The only difference is that in this case, the car 

is running. The PEC will start the activity program 432 55 rental agent's screen would not contain information on 

which has been registered to the next activity in this process. available cars since there is no qualifying match for a car at 

The activity program will then run to completion. the requested city. The screen would contain an option to 

Activity program 432 will use FlowMark APIs to retrieve move a car that matches the customer's request from an 

any input data from the FlowMark input data container. The alternative location. 

activity program will open a conversation with the web 60 Meanwhile, activity program 432 has issued a Disconnect 

client by issuing, an Open API to WWW APIs 434. The API. The Disconnect API generates a disconnect request 

Open API generates an Open request message for FMIG 430 message for FMIG 430 and includes information such as the 

and includes information such as the process instance and conversation identifier, process instance, activity name and 

activity name and FlowMark userlD. FMIG 430 takes this FlowMark userlD. FMIG 430 takes this information, locates 

information, matches up the web client by finding the 65 the corresponding entry in its internal cache and records all 

appropriate process instance, activity name, and userlD in of this information along with the "disconnect" status for 

the internal data cache. As before, FMIG 430 also generates activity program 432. FMIG 430 transmits an OK response 
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message to WWW API 43, which detaches from FMIG 430 
and sends a return code to activity program 432. Activity 
program 432 checks the return code and verifies that the 
disconnect API was successfully recorded. Activity program 
432 saves the conversation identifier and status information 
in a local database for restoring the disconnected process at 
a later time. Since this activity has progressed as far as 
possible without actually completing, control is returned to 
the PEC. Since the activity did not complete, the PEC will 
update FlowMark database 438 to show that the activity is 
ready to be started again. As far as FlowMark is concerned, 
this is a "manual start" activity. Since this activity is ready 
and manual start, FMIG 430 can issue a FlowMark API 436 
at a later time to re-start the activity when the data is 
available from the car rental agent. The car rental agent 
selects that they wish to move a car from an alternate 
location to fill the car rental request and clicks on "submit," 
The process of data transfer and web client authentication 
proceed as previously described. This time, when FMIG 430 
checks the conversation identifier, it will notice that the 
status of the activity is "disconnected." FMIG 430 issues 
FlowMark API 436 to re-start the activity program 432. 
Activity program 432 is thus re-started FlowMark 450 
creates the process instance and updates database 438 as 
before. The PEC starts the activity program 432 and the 
necessary data is transferred from FMIG 430. Activity 
program 432 can now run to completion. It is possible to 
determine which rental car should be moved from which 
location and to transmit this data from the car rental agent to 
FlowMark 450 by a similar sequence and series of commu- 
nications. 

As can be seen from the examples presented above, 
providing a common user interface for accessing various 
software applications over the WWW allows for increased 
productivity with greater efficiency. With a reduction in the 
both the length and amount of training required for users to 
gain access to various software applications, the flexibility 
of using more software applications also becomes available. 
All of these advantages allow for businesses to be more 
competitive and successful in the marketplace. 

While the invention has been particularly shown and 
described with reference to preferred embodiments thereof, 
it will be understood by those skilled in the art that various 
changes in form and details may be made therein without 
departing from the spirit and scope of the invention. 

We claim: 

1. A computer system that provides a common user 
interface for communicating between a plurality of web 
browsers and a software application over the World-Wide 
Web, the computer system comprising: 

at least one Central Processing Unit (CPU); 

a memory coupled to the CPU; and 

a transaction support mechanism, the transaction support 
mechanism residing in the memory and being executed 
by the at least one CPU, wherein the traasaction 
support mechanism is capable of receiving and trans- 
mitting data to and from the plurality of web browsers 
via the common user interface, the transaction support 
mechanism using an identifier mechanism to identify 
and track the data. 

2. The computer system of claim 1, further comprising a 
security mechanism, the security mechanism residing in the 
memory and being executed by the at least one CPU, the 
security mechanism coupled to and providing an interface 
between the software application and the plurality of web 
browsers, the security mechanism receiving user input from 
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the plurality of web browsers, the security mechanism 
retrieving authentication parameters for the software appli- 
cation corresponding to the received input. 

3. The computer system of claim 1, further comprising an 
5 interface mechanism, the interface mechanism comprising a 

gateway mechanism for handling at least one variable, the 
gateway mechanism residing in the memory and being 
executed by the at least one CPU, the gateway mechanism 
comprising a universal common gateway interface for com- 
1(J municating between the plurality of web browsers and the 
software application without requiring reprogramming for 
the software application. 

4. The computer system of claim 1, further comprising a 
disconnect mechanism, the disconnect mechanism residing 
in the memory and being executed by the at least one CPU, 

15 the disconnect mechanism storing state data and a conver- 
sation identifier relating to each conversation between one of 
the plurality of web browsers and a software application 
process when the software application process is suspended 
such that the data can be retrieved when the software 

20 application process is resumed. 

5. The computer system of claim 1, further comprising: 
a security mechanism, the security mechanism residing in 

the memory and being executed by the at least one 
CPU, the security mechanism coupled to and providing 

25 an interface between the software application and the 
plurality of web browsers, the security mechanism 
receiving user input from the plurality of web browsers, 
the security mechanism retrieving authentication 
parameters for the software application corresponding 

30 to the received input; 

an interface mechanism, the interface mechanism com- 
prising a gateway mechanism for handling at least one 
variable, the gateway mechanism residing in the 
memory and being executed by the at least one CPU, 
the gateway mechanism comprising a universal com- 
mon gateway interface for communicating between the 
plurality of web browsers and the software application 
without requiring reprogramming for the software 
application; and 
a disconnect mechanism, the disconnect mechanism 

40 residing in the memory and being executed by the at 
least one CPU, the disconnect mechanism storing state 
data and a conversation identifier relating to each 
conversation between one of the plurality of web 
browsers and a software application process when the 

45 software application process is suspended such that the 
data can be retrieved when the software application 
process is resumed. 

6. The computer system of claim 1, wherein the transac- 
tion support mechanism further comprises a mechanism for 

50 communicating with a native interface to the software 
application. 

7. The computer system of claim 1 wherein the transac- 
tion support mechanism comprises: 

an application gateway in communication with the web 
55 server application and the software application, the 
application gateway residing in the memory and being 
executed by at least one of the plurality of CPUs, the 
application gateway including the identifier 
mechanism, the identifier mechanism generating an 
60 identifier for each of the plurality of web browsers and 
routing data from the software application to the 
selected one of the plurality of web browsers that 
correspond to the identifier. 

8. The computer system of claim 7 wherein the applica- 
65 tion gateway processes data received from the plurality of 

web servers and processes data received from the applica- 
tion program. 
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9. The computer system of claim 1 wherein the software 
application is a process engineering software application. 

10. The computer system of claim 1 further comprising at 
least one activity program interface (API) in communication 
with at least one activity program that executes under the 5 
direction of the software application, the at least one activity 
program interface communicating between the at least one 
activity program and the application gateway. 

11. A computer system that provides a common user 
interface for communicating between a web browser and a 10 
software application over the World-Wide Web, the com- 
puter system comprising: 

a plurality of Central Processing Units (CPUs); 

a memory coupled to the plurality of CPUs; 

each of the plurality of web browsers residing in the 15 
memory and being executed by at least one of the 
plurality of CPUs; 

a web server application in communication with at least 
one of the plurality of web browsers, the web server 2Q 
application residing in the memory and being executed 
by at least one of the plurality of CPUs; and 

the software application residing in the memory and being 
executed by at least one of the plurality of CPUs; and 

an application gateway in communication with the web 2 s 
server application and a native interface to the software 
application, the application gateway residing in the 
memory and being executed by at least one of the 
plurality of CPUs, the application gateway including: 
an identifier mechanism, the identifier mechanism gen- 30 
erating an identifier for each of ihe plurality of web 
browsers and routing data from the software appli- 
cation to the selected one of the plurality of web 
browsers that correspond to the identifier. 

12. The computer system of claim 11 wherein the appli- 35 
cation gateway processes data received from the web server 
application and the application program. 

13. The computer system of claim 11 wherein the soft- 
ware application is a process engineering software applica- 
tion. 40 

14. The computer system of claim 11 further comprising 
at least one activity program interface (API) in communi- 
cation with at least one activity program that executes under 
the direction of the software application, the at least one 
activity program interface communicating between the at 45 
least one activity program and the application gateway. 

15. The computer system of claim 11 wherein the web 
server application comprises: 

an authenticator, the authenticator determining from 
authentication data passed from one of the plurality of 50 
web browsers whether the selected web browser is 
authorized to access the web server application; and 

wherein the web server processes data received from the 
plurality of web browsers and data received from the 
application gateway. 55 

16. The computer system of claim 11 wherein the web 
browser is executed on a client workstation by at least one 
of the plurality of CPUs. 

17. The computer system of claim 11 wherein the web 
server application is executed on a web server computer by 60 
at least one of the plurality of CPUs. 

18. The computer system of claim 11 wherein the appli- 
cation gateway is executed on the web server computer by 
at least one of the plurality of CPUs. 

19. The computer system of claim 11 wherein the appli- 65 
cation gateway is executed on a first computer by at least one 

of the plurality of CPUs. 
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20. The computer system of claim 11 wherein the soft- 
ware application is executed on a second computer by at 
least one of the plurality of CPUs. 

21. The computer system of claim 11 wherein the appli- 
cation gateway is executed on the second computer by at 
least one of the plurality of CPUs. 

22. A program product for providing a common user 
interface for communicating between a plurality of web 
browsers and a software application, the program product 
comprising: 

(1) an application gateway in communication with the 
plurality of web browsers and the software application, 
the application gateway comprising: 

an identifier mechanism, the identifier mechanism gen- 
erating an identifier for each of the plurality of web 
browsers and routing data from the software appli- 
cation to a selected one of the plurality of web 
browsers that correspond to the identifier via the 
common user interface; and 

a mechanism for communicating with a native interface 
to the software application; and 

(2) signal bearing media bearing the application gateway. 

23. The program product of claim 22 wherein the signal 
bearing media comprises recordable media. 

24. The program product of claim 22 wherein the signal 
bearing media comprises transmission media. 

25. The program product of claim 22 wherein the software 
application is a process engineering software application. 

26. The program product of claim 22 further comprising 
at least one activity program interface (API) in communi- 
cation with at least one activity program that executes under 
the direction of the software application, the at least one 
activity program interface communicating between the at 
least one activity program and the application gateway. 

27. A computer-implemented method for providing a 
common user interface for communicating between a web 
browser and a software application over the World-Wide 
Web, the method comprising the steps of: 

providing a plurality of Central Processing Units (CPUs ); 
providing a memory coupled to the plurality of CPUs; 
executing at least one of the plurality of web browsers 

residing in the memory by at least one of the plurality 

of CPUs; 

providing a web server application residing in the 

memory and being executed by at least one of the 

plurality of CPUs; 
providing a software application residing in the memory 

and being executed by at least one of the plurality of 

CPUs; 

providing an application gateway residing in the memory 
and being executed by at least one of the plurality of 
CPUs; 

a selected one of the plurality of web browsers initiating 
an access to the software application by sending 
authentication data and environment data to the web 
server application; 

processing the environment data if the authentication data 
authorizes the selected web browser to access the web 
server application; 

outputting the processed environment data to the appli- 
cation gateway; 

generating an identifier corresponding to the selected web 
browser and a desired process to be executed by the 
software application; 

providing a security mechanism, the security mechanism 
residing in the memory and being executed by the at 
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least one CPU, the security mechanism receiving user 
input from the web browser, the security mechanism 
retrieving authentication parameters for the software 
application corresponding to the received input 

providing an interface mechanism residing in the memory 5 
and being executed by the at least one CPU, wherein 
the interface mechanism receives and transmits vari- 
ables and templates between the web browser and the 
software application; and 

providing a disconnect mechanism residing in the 10 
memory and being executed by the at least one CPU, 
the disconnect mechanism storing state and a conver- 
sation identifier relating to a conversation between the 
web browser and the software application when the 
conversation is suspended such that the state data can 15 
be retrieved when the conversation is resumed execut- 
ing the desired process by the software application; 

returning the results of executing the desired process to 
the application gateway with the identifier; 2Q 

determining which of the plurality of browsers should be 
sent the results based on the identifier; 

sending the results from the application gateway to the 
web server application; and 

sending the results from the web server to the selected one 25 
web browser corresponding to the identifier. 

28. The method of claim 27 wherein the software appli- 
cation is a process engineering software application. 

29. A system for providing a common user interface for 
communicating between a web browser and a software 30 
application over the World-Wide Web, the system compris- 
ing: 

a client workstation running the web browser; 

a web server computer running a web server application; 35 

a first computer running an application gateway; 

a second computer running the software application; 
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a communication mechanism between the web browser 
and the web server application which allows data to be 
transmitted between the web browser and the web 
server application; 

a communication mechanism between the web server 
application and the application gateway which allows 
data to be transmitted between the web server applica- 
tion and the application gateway; 

a communication mechanism between the application 
gateway and the software application which allows data 
to be transmitted between the application gateway and 
the software application; 

an interface mechanism wherein the interface mechanism 
receives and transmits variables and templates between 
the web browser and the software application; 

a security mechanism coupled to and providing an inter- 
face between the web browser and the software appli- 
cation; 

a disconnect mechanism wherein the disconnect mecha- 
nism stores state and a conversation identifier relating 
to a conversation between the web browser and the 
software application when the conversation is sus- 
pended such that the state data can be retrieved when 
the conversation is resumed executing the desired pro- 
cess by the software application; and 

a plurality of application programming interfaces that 
allow the web browser to communicate with the soft- 
ware application over the World-Wide Web. 

30. The system of claim 29 wherein the software appli- 
cation is a process engineering software application. 

31. The system of claim 29 wherein the web server 
computer comprises the first computer. 

32. The system of claim 29 wherein the first computer 
comprises the second computer. 

* * # * * 
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